Edit tour

Windows Analysis Report
https://burnsmcd.alationcloud.com/compose/query/64/;1

Overview

General Information

Sample URL:	https://burnsmcd.alationcloud.com/compose/query/64/;1
Analysis ID:	1543506
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2196,i,8796696908694474424,14027796887653547186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://burnsmcd.alationcloud.com/compose/query/64/;1" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?SAMLRequest=hZLRT4MwEMb%2FFdL3AsOxjWYjmS7GmRnJQB98a0u3NcIVe8VM%2F3qBaZwv8%2FGu33f3uy%2BdI6%2Brhi1bd4CtemsVOu9YV4Csf1iQ1gIzHDUy4LVC5iTLlw8bFvkh44jKOm2AnFmay57GGmekqYi3Xi2ILukRNsn98fH1EJUZbLLPnHjPymI3dUE6Q6dDbNUa0HFwXSuMxnQU0mhWhCM2nrB48kK8VYetgbvBdXCuQRYEldlr8GstrUGzcwYqDcqXpg7EToiER4JOyiShYzWdUXElpzSJwzAu4ziWMxH0x0TEy76BrzWUGvaXrxMnEbK7osho9pgXxFv%2BpHRjANta2VzZdy3V03bzyyq6qVjL0ufVcIWsTFsOrANGwCUGJJ33BRsCsd6tsTV3l3n6TpfxbpAyBU67D5L%2Bv3QenG1KT9XfT5J%2BAQ%3D%3D&RelayState=%2Fcompose%2Fquery%2F64%2F%253B1%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=eakQ1cIf1S4D8YmSsMS89T49QHwtAFbkoAtKpfe1YyWDbFAiKwR20jwWxNoCt%2BXPVtjmz5xakg0jJHAEKePwd1nnZQzHTVu2T9nKMsD5Cvsem%2B9CyE28dwz3H0b63mor%2FcrL7QwBzkIIJAD3apDXSMYR9cY27s647WwiijKLMwiZAHyT5FYEm%2FaDeWYkJ2G55YD6fCNSKlhyX0r1AJbG7tXpnCys8g%2F6mPh9yrxtKiI%2B%2BbVy4hrItUR3v%2BinkDFSEueIK87mT3L16CnfXGb609zIYgjx3jopq2Up3un%2FO4cwCQ0LOnYCv9SyekA67vVHYFv51WgNs6TPipkB...

HTTP Parser: Number of links: 0

HTTP Parser: Title: Redirecting does not match URL

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?SAMLRequest=hZLRT4MwEMb%2FFdL3AsOxjWYjmS7GmRnJQB98a0u3NcIVe8VM%2F3qBaZwv8%2FGu33f3uy%2BdI6%2Brhi1bd4CtemsVOu9YV4Csf1iQ1gIzHDUy4LVC5iTLlw8bFvkh44jKOm2AnFmay57GGmekqYi3Xi2ILukRNsn98fH1EJUZbLLPnHjPymI3dUE6Q6dDbNUa0HFwXSuMxnQU0mhWhCM2nrB48kK8VYetgbvBdXCuQRYEldlr8GstrUGzcwYqDcqXpg7EToiER4JOyiShYzWdUXElpzSJwzAu4ziWMxH0x0TEy76BrzWUGvaXrxMnEbK7osho9pgXxFv%2BpHRjANta2VzZdy3V03bzyyq6qVjL0ufVcIWsTFsOrANGwCUGJJ33BRsCsd6tsTV3l3n6TpfxbpAyBU67D5L%2Bv3QenG1KT9XfT5J%2BAQ%3D%3D&RelayState=%2Fcompose%2Fquery%2F64%2F%253B1%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=eakQ1cIf1S4D8YmSsMS89T49QHwtAFbkoAtKpfe1YyWDbFAiKwR20jwWxNoCt%2BXPVtjmz5xakg0jJHAEKePwd1nnZQzHTVu2T9nKMsD5Cvsem%2B9CyE28dwz3H0b63mor%2FcrL7QwBzkIIJAD3apDXSMYR9cY27s647WwiijKLMwiZAHyT5FYEm%2FaDeWYkJ2G55YD6fCNSKlhyX0r1AJbG7tXpnCys8g%2F6mPh9yrxtKiI%2B%2BbVy4hrItUR3v%2BinkDFSEueIK87mT3L16CnfXGb609zIYgjx3jopq2Up3un%2FO4cwCQ0LOnYCv9SyekA67vVHYFv51WgNs6TPipkB	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?SAMLRequest=hZLRT4MwEMb%2FFdL3AsOxjWYjmS7GmRnJQB98a0u3NcIVe8VM%2F3qBaZwv8%2FGu33f3uy%2BdI6%2Brhi1bd4CtemsVOu9YV4Csf1iQ1gIzHDUy4LVC5iTLlw8bFvkh44jKOm2AnFmay57GGmekqYi3Xi2ILukRNsn98fH1EJUZbLLPnHjPymI3dUE6Q6dDbNUa0HFwXSuMxnQU0mhWhCM2nrB48kK8VYetgbvBdXCuQRYEldlr8GstrUGzcwYqDcqXpg7EToiER4JOyiShYzWdUXElpzSJwzAu4ziWMxH0x0TEy76BrzWUGvaXrxMnEbK7osho9pgXxFv%2BpHRjANta2VzZdy3V03bzyyq6qVjL0ufVcIWsTFsOrANGwCUGJJ33BRsCsd6tsTV3l3n6TpfxbpAyBU67D5L%2Bv3QenG1KT9XfT5J%2BAQ%3D%3D&RelayState=%2Fcompose%2Fquery%2F64%2F%253B1%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=eakQ1cIf1S4D8YmSsMS89T49QHwtAFbkoAtKpfe1YyWDbFAiKwR20jwWxNoCt%2BXPVtjmz5xakg0jJHAEKePwd1nnZQzHTVu2T9nKMsD5Cvsem%2B9CyE28dwz3H0b63mor%2FcrL7QwBzkIIJAD3apDXSMYR9cY27s647WwiijKLMwiZAHyT5FYEm%2FaDeWYkJ2G55YD6fCNSKlhyX0r1AJbG7tXpnCys8g%2F6mPh9yrxtKiI%2B%2BbVy4hrItUR3v%2BinkDFSEueIK87mT3L16CnfXGb609zIYgjx3jopq2Up3un%2FO4cwCQ0LOnYCv9SyekA67vVHYFv51WgNs6TPipkB	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?SAMLRequest=hZLRT4MwEMb%2FFdL3AsOxjWYjmS7GmRnJQB98a0u3NcIVe8VM%2F3qBaZwv8%2FGu33f3uy%2BdI6%2Brhi1bd4CtemsVOu9YV4Csf1iQ1gIzHDUy4LVC5iTLlw8bFvkh44jKOm2AnFmay57GGmekqYi3Xi2ILukRNsn98fH1EJUZbLLPnHjPymI3dUE6Q6dDbNUa0HFwXSuMxnQU0mhWhCM2nrB48kK8VYetgbvBdXCuQRYEldlr8GstrUGzcwYqDcqXpg7EToiER4JOyiShYzWdUXElpzSJwzAu4ziWMxH0x0TEy76BrzWUGvaXrxMnEbK7osho9pgXxFv%2BpHRjANta2VzZdy3V03bzyyq6qVjL0ufVcIWsTFsOrANGwCUGJJ33BRsCsd6tsTV3l3n6TpfxbpAyBU67D5L%2Bv3QenG1KT9XfT5J%2BAQ%3D%3D&RelayState=%2Fcompose%2Fquery%2F64%2F%253B1%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=eakQ1cIf1S4D8YmSsMS89T49QHwtAFbkoAtKpfe1YyWDbFAiKwR20jwWxNoCt%2BXPVtjmz5xakg0jJHAEKePwd1nnZQzHTVu2T9nKMsD5Cvsem%2B9CyE28dwz3H0b63mor%2FcrL7QwBzkIIJAD3apDXSMYR9cY27s647WwiijKLMwiZAHyT5FYEm%2FaDeWYkJ2G55YD6fCNSKlhyX0r1AJbG7tXpnCys8g%2F6mPh9yrxtKiI%2B%2BbVy4hrItUR3v%2BinkDFSEueIK87mT3L16CnfXGb609zIYgjx3jopq2Up3un%2FO4cwCQ0LOnYCv9SyekA67vVHYFv51WgNs6TPipkB	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?SAMLRequest=hZLRT4MwEMb%2FFdL3AsOxjWYjmS7GmRnJQB98a0u3NcIVe8VM%2F3qBaZwv8%2FGu33f3uy%2BdI6%2Brhi1bd4CtemsVOu9YV4Csf1iQ1gIzHDUy4LVC5iTLlw8bFvkh44jKOm2AnFmay57GGmekqYi3Xi2ILukRNsn98fH1EJUZbLLPnHjPymI3dUE6Q6dDbNUa0HFwXSuMxnQU0mhWhCM2nrB48kK8VYetgbvBdXCuQRYEldlr8GstrUGzcwYqDcqXpg7EToiER4JOyiShYzWdUXElpzSJwzAu4ziWMxH0x0TEy76BrzWUGvaXrxMnEbK7osho9pgXxFv%2BpHRjANta2VzZdy3V03bzyyq6qVjL0ufVcIWsTFsOrANGwCUGJJ33BRsCsd6tsTV3l3n6TpfxbpAyBU67D5L%2Bv3QenG1KT9XfT5J%2BAQ%3D%3D&RelayState=%2Fcompose%2Fquery%2F64%2F%253B1%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=eakQ1cIf1S4D8YmSsMS89T49QHwtAFbkoAtKpfe1YyWDbFAiKwR20jwWxNoCt%2BXPVtjmz5xakg0jJHAEKePwd1nnZQzHTVu2T9nKMsD5Cvsem%2B9CyE28dwz3H0b63mor%2FcrL7QwBzkIIJAD3apDXSMYR9cY27s647WwiijKLMwiZAHyT5FYEm%2FaDeWYkJ2G55YD6fCNSKlhyX0r1AJbG7tXpnCys8g%2F6mPh9yrxtKiI%2B%2BbVy4hrItUR3v%2BinkDFSEueIK87mT3L16CnfXGb609zIYgjx3jopq2Up3un%2FO4cwCQ0LOnYCv9SyekA67vVHYFv51WgNs6TPipkB	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?SAMLRequest=hZLRT4MwEMb%2FFdL3AsOxjWYjmS7GmRnJQB98a0u3NcIVe8VM%2F3qBaZwv8%2FGu33f3uy%2BdI6%2Brhi1bd4CtemsVOu9YV4Csf1iQ1gIzHDUy4LVC5iTLlw8bFvkh44jKOm2AnFmay57GGmekqYi3Xi2ILukRNsn98fH1EJUZbLLPnHjPymI3dUE6Q6dDbNUa0HFwXSuMxnQU0mhWhCM2nrB48kK8VYetgbvBdXCuQRYEldlr8GstrUGzcwYqDcqXpg7EToiER4JOyiShYzWdUXElpzSJwzAu4ziWMxH0x0TEy76BrzWUGvaXrxMnEbK7osho9pgXxFv%2BpHRjANta2VzZdy3V03bzyyq6qVjL0ufVcIWsTFsOrANGwCUGJJ33BRsCsd6tsTV3l3n6TpfxbpAyBU67D5L%2Bv3QenG1KT9XfT5J%2BAQ%3D%3D&RelayState=%2Fcompose%2Fquery%2F64%2F%253B1%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=eakQ1cIf1S4D8YmSsMS89T49QHwtAFbkoAtKpfe1YyWDbFAiKwR20jwWxNoCt%2BXPVtjmz5xakg0jJHAEKePwd1nnZQzHTVu2T9nKMsD5Cvsem%2B9CyE28dwz3H0b63mor%2FcrL7QwBzkIIJAD3apDXSMYR9cY27s647WwiijKLMwiZAHyT5FYEm%2FaDeWYkJ2G55YD6fCNSKlhyX0r1AJbG7tXpnCys8g%2F6mPh9yrxtKiI%2B%2BbVy4hrItUR3v%2BinkDFSEueIK87mT3L16CnfXGb609zIYgjx3jopq2Up3un%2FO4cwCQ0LOnYCv9SyekA67vVHYFv51WgNs6TPipkB...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?SAMLRequest=hZLRT4MwEMb%2FFdL3AsOxjWYjmS7GmRnJQB98a0u3NcIVe8VM%2F3qBaZwv8%2FGu33f3uy%2BdI6%2Brhi1bd4CtemsVOu9YV4Csf1iQ1gIzHDUy4LVC5iTLlw8bFvkh44jKOm2AnFmay57GGmekqYi3Xi2ILukRNsn98fH1EJUZbLLPnHjPymI3dUE6Q6dDbNUa0HFwXSuMxnQU0mhWhCM2nrB48kK8VYetgbvBdXCuQRYEldlr8GstrUGzcwYqDcqXpg7EToiER4JOyiShYzWdUXElpzSJwzAu4ziWMxH0x0TEy76BrzWUGvaXrxMnEbK7osho9pgXxFv%2BpHRjANta2VzZdy3V03bzyyq6qVjL0ufVcIWsTFsOrANGwCUGJJ33BRsCsd6tsTV3l3n6TpfxbpAyBU67D5L%2Bv3QenG1KT9XfT5J%2BAQ%3D%3D&RelayState=%2Fcompose%2Fquery%2F64%2F%253B1%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=eakQ1cIf1S4D8YmSsMS89T49QHwtAFbkoAtKpfe1YyWDbFAiKwR20jwWxNoCt%2BXPVtjmz5xakg0jJHAEKePwd1nnZQzHTVu2T9nKMsD5Cvsem%2B9CyE28dwz3H0b63mor%2FcrL7QwBzkIIJAD3apDXSMYR9cY27s647WwiijKLMwiZAHyT5FYEm%2FaDeWYkJ2G55YD6fCNSKlhyX0r1AJbG7tXpnCys8g%2F6mPh9yrxtKiI%2B%2BbVy4hrItUR3v%2BinkDFSEueIK87mT3L16CnfXGb609zIYgjx3jopq2Up3un%2FO4cwCQ0LOnYCv9SyekA67vVHYFv51WgNs6TPipkB...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?SAMLRequest=hZLRT4MwEMb%2FFdL3AsOxjWYjmS7GmRnJQB98a0u3NcIVe8VM%2F3qBaZwv8%2FGu33f3uy%2BdI6%2Brhi1bd4CtemsVOu9YV4Csf1iQ1gIzHDUy4LVC5iTLlw8bFvkh44jKOm2AnFmay57GGmekqYi3Xi2ILukRNsn98fH1EJUZbLLPnHjPymI3dUE6Q6dDbNUa0HFwXSuMxnQU0mhWhCM2nrB48kK8VYetgbvBdXCuQRYEldlr8GstrUGzcwYqDcqXpg7EToiER4JOyiShYzWdUXElpzSJwzAu4ziWMxH0x0TEy76BrzWUGvaXrxMnEbK7osho9pgXxFv%2BpHRjANta2VzZdy3V03bzyyq6qVjL0ufVcIWsTFsOrANGwCUGJJ33BRsCsd6tsTV3l3n6TpfxbpAyBU67D5L%2Bv3QenG1KT9XfT5J%2BAQ%3D%3D&RelayState=%2Fcompose%2Fquery%2F64%2F%253B1%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=eakQ1cIf1S4D8YmSsMS89T49QHwtAFbkoAtKpfe1YyWDbFAiKwR20jwWxNoCt%2BXPVtjmz5xakg0jJHAEKePwd1nnZQzHTVu2T9nKMsD5Cvsem%2B9CyE28dwz3H0b63mor%2FcrL7QwBzkIIJAD3apDXSMYR9cY27s647WwiijKLMwiZAHyT5FYEm%2FaDeWYkJ2G55YD6fCNSKlhyX0r1AJbG7tXpnCys8g%2F6mPh9yrxtKiI%2B%2BbVy4hrItUR3v%2BinkDFSEueIK87mT3L16CnfXGb609zIYgjx3jopq2Up3un%2FO4cwCQ0LOnYCv9SyekA67vVHYFv51WgNs6TPipkB...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?SAMLRequest=hZLRT4MwEMb%2FFdL3AsOxjWYjmS7GmRnJQB98a0u3NcIVe8VM%2F3qBaZwv8%2FGu33f3uy%2BdI6%2Brhi1bd4CtemsVOu9YV4Csf1iQ1gIzHDUy4LVC5iTLlw8bFvkh44jKOm2AnFmay57GGmekqYi3Xi2ILukRNsn98fH1EJUZbLLPnHjPymI3dUE6Q6dDbNUa0HFwXSuMxnQU0mhWhCM2nrB48kK8VYetgbvBdXCuQRYEldlr8GstrUGzcwYqDcqXpg7EToiER4JOyiShYzWdUXElpzSJwzAu4ziWMxH0x0TEy76BrzWUGvaXrxMnEbK7osho9pgXxFv%2BpHRjANta2VzZdy3V03bzyyq6qVjL0ufVcIWsTFsOrANGwCUGJJ33BRsCsd6tsTV3l3n6TpfxbpAyBU67D5L%2Bv3QenG1KT9XfT5J%2BAQ%3D%3D&RelayState=%2Fcompose%2Fquery%2F64%2F%253B1%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=eakQ1cIf1S4D8YmSsMS89T49QHwtAFbkoAtKpfe1YyWDbFAiKwR20jwWxNoCt%2BXPVtjmz5xakg0jJHAEKePwd1nnZQzHTVu2T9nKMsD5Cvsem%2B9CyE28dwz3H0b63mor%2FcrL7QwBzkIIJAD3apDXSMYR9cY27s647WwiijKLMwiZAHyT5FYEm%2FaDeWYkJ2G55YD6fCNSKlhyX0r1AJbG7tXpnCys8g%2F6mPh9yrxtKiI%2B%2BbVy4hrItUR3v%2BinkDFSEueIK87mT3L16CnfXGb609zIYgjx3jopq2Up3un%2FO4cwCQ0LOnYCv9SyekA67vVHYFv51WgNs6TPipkB...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49786 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: burnsmcd.alationcloud.com to https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?samlrequest=hzlrt4mwemb%2ffdl3asoxjwyjms7gmrnjqb98a0u3ncive8vm%2f3qbazwv8%2fgu33f3uy%2bdi6%2brhi1bd4ctemsvou9yv4csf1iq1gizhduy4lvc5itllw8bfvkh44jkom2anfmay57ggmekqyi3xi2ilukrnsn98fh1ejuzbllpnhjpymi3due6q6ddbnua0hfwxsumxnqu0mhwhcm2nrb48kk8vyetgbvbdxcuqryeldlr8gstrugzcwyqdcqxpg7etoier4joyishyzwduxelpzsjwzau4ziwmxh0x0tey76brzwugvaxrxmnebk7osho9pgxxfv%2bphrjanta2vzzdy3v03bzyyq6qvjl0ufvciwstfsorangwcugjj33brscsd6tstv3l3n6tpfxbpaybu67d5l%2bv3qeng1kt9xft5j%2baq%3d%3d&relaystate=%2fcompose%2fquery%2f64%2f%253b1%2f&sigalg=http%3a%2f%2fwww.w3.org%2f2001%2f04%2fxmldsig-more%23rsa-sha256&signature=eakq1cif1s4d8ymssms89t49qhwtafbkoatkpfe1yywdbfaikwr20jwwxnoct%2bxpvtjmz5xakg0jjhaekepwd1nnzqzhtvu2t9nkmsd5cvsem%2b9cye28dwz3h0b63mor%2fcrl7qwbzkiijad3apdxsmyr9cy27s647wwiijklmwizahyt5fyem%2fadewykj2g55yd6fcnsklhyx0r1ajbg7txpncys8g%2f6mph9yrxtkii%2b%2bbvy4hritur3v%2binkdfseueik87mt3l16cnfxgb609ziygjx3jopq2up3un%2fo4cwcq0lonycv9syeka67vvhyfv51wgns6tpipkb4%2fgiwa%3d%3d

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /compose/query/64/;1 HTTP/1.1Host: burnsmcd.alationcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/query/64/%3B1/ HTTP/1.1Host: burnsmcd.alationcloud.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/?next=/compose/query/64/%253B1/ HTTP/1.1Host: burnsmcd.alationcloud.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /saml2/login/?next=/compose/query/64/%253B1/ HTTP/1.1Host: burnsmcd.alationcloud.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-ebuwtroprxsqonwy2n8z4s0iw7gb0u-ycuo77htkuf4/logintenantbranding/0/bannerlogo?ts=637805376984720579 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-ebuwtroprxsqonwy2n8z4s0iw7gb0u-ycuo77htkuf4/logintenantbranding/0/bannerlogo?ts=637805376984720579 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: burnsmcd.alationcloud.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net
Source: global traffic	DNS traffic detected: DNS query: autologon.microsoftazuread-sso.com

Source: chromecache_59.2.dr, chromecache_81.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_59.2.dr, chromecache_81.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_59.2.dr, chromecache_81.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_58.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_58.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49786 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/39@22/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2196,i,8796696908694474424,14027796887653547186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://burnsmcd.alationcloud.com/compose/query/64/;1"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2196,i,8796696908694474424,14027796887653547186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://knockoutjs.com/	0%	URL Reputation	safe
http://knockoutjs.com/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://login.windows-ppe.net	1%	Virustotal		Browse
https://aadcdn.msauthimages.net/dbd5a2dd-ebuwtroprxsqonwy2n8z4s0iw7gb0u-ycuo77htkuf4/logintenantbranding/0/bannerlogo?ts=637805376984720579	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ingress-enterprise.use1.alationcloud.com	35.169.104.34	true	false	unknown
sni1gl.wpc.upsiloncdn.net	152.199.21.175	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	172.217.16.196	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
autologon.microsoftazuread-sso.com	20.190.159.23	true	false	unknown
aadcdn.msauthimages.net	unknown	unknown	false	unknown
burnsmcd.alationcloud.com	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://burnsmcd.alationcloud.com/compose/query/64/%3B1/	false		unknown
https://burnsmcd.alationcloud.com/saml2/login/?next=/compose/query/64/%253B1/	false		unknown
https://aadcdn.msauthimages.net/dbd5a2dd-ebuwtroprxsqonwy2n8z4s0iw7gb0u-ycuo77htkuf4/logintenantbranding/0/bannerlogo?ts=637805376984720579	false	0%, Virustotal, Browse	unknown
https://burnsmcd.alationcloud.com/login/?next=/compose/query/64/%253B1/	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false		unknown
https://burnsmcd.alationcloud.com/compose/query/64/;1	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://knockoutjs.com/	chromecache_59.2.dr, chromecache_81.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://login.microsoftonline.com	chromecache_58.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_59.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_59.2.dr, chromecache_81.2.dr	false		unknown
https://login.windows-ppe.net	chromecache_58.2.dr	false	1%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.169.104.34	ingress-enterprise.use1.alationcloud.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1543506
Start date and time:	2024-10-28 02:45:50 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://burnsmcd.alationcloud.com/compose/query/64/;1
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/39@22/6

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.186.142, 66.102.1.84, 34.104.35.123, 40.126.32.140, 20.190.160.14, 40.126.32.68, 40.126.32.74, 40.126.32.72, 40.126.32.76, 20.190.160.20, 40.126.32.134, 172.202.163.200, 217.20.57.18, 2.16.168.7, 2.16.168.12, 20.190.159.23, 20.190.159.64, 20.190.159.68, 40.126.31.69, 20.190.159.71, 40.126.31.71, 40.126.31.67, 20.190.159.2, 40.69.42.241, 192.229.221.95, 142.250.185.234, 142.250.74.202, 172.217.16.202, 142.250.186.74, 142.250.185.202, 216.58.212.170, 142.250.186.42, 142.250.186.138, 142.250.181.234, 142.250.184.234, 142.250.186.170, 172.217.18.10, 216.58.206.42, 142.250.186.106, 142.250.184.202, 172.217.16.138, 40.126.32.136, 20.190.160.17, 40.126.32.138, 13.95.31.18, 142.250.186.99, 2.19.126.143, 2.19.126.146, 4.245.163.56
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, www.tm.lg.prod.aadmsa.akadns.net, clientservices.googleapis.com, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, clients2.google.com, ocsp.digicert.com, login.live.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, aadcdn.azureedge.net, aadcdn.ec.azureedge.net, sls.update.microsoft.com, update.googleapis.com, login.mso.msidentity.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.tm.ak.prd.aadg.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, aadcdnoriginwus2.azureedge.net, otelrules.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, www.tm.ak.prd.aadg.akadns.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, e
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449728
Category:	downloaded
Size (bytes):	122269
Entropy (8bit):	7.9974362643305215
Encrypted:	true
SSDEEP:	3072:DqMdt2M2z1jeNS76MAxjW1EZgVzuqZ+qNotqrG8/yiKJSgJF:jc1NUxCECVzuqZN7/9sSC
MD5:	D2625A3B7A80F9E0F6BFD8FDBEEDB164
SHA1:	A1114F7EE86956E5F6DF604B2C3F25107AA3F124
SHA-256:	C6DDC0AE20A875A5E972A9961A6D139C7E28E64CCEE0CE47BA0CC294B7DEAD16
SHA-512:	F4D2F226DFFC191C21739BC6814ECC502A4B0D62E928F2526786B3AF774737E628C8E550ACBCDF99EEF455E034C5264439B4A8EE08D33D45CE9AE76FF5B513F1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js
Preview:	...........{w.8.8.....fn..(...J...'..v.gb..wS..Y..ud.+.y....?.$%.SU.{.=..y.,.\|. .. ......si...S..z...4.\|v}\....(].Fg...........4.\|V...v..R.....N....NX\......$.g...Q.'s...{q......Ke..rKWv....U..Am......._..CR...sX..\... f.E....9.....8.$..9.{.F.....Kv.J1KJ.0J.x?..!B.Zcj....8t..s...........8_...L...U..ie..\|.JIXz.....x.`Z...bj......I..a.,z...~)..D...%.2....-M#;@...`..i......cTt.Z.fs...L/.8..s...R..^...J.?.0.W..K.z.h..Z.5....d...>L..a1.:.......C.G........?c^....,]-...q8..@.u.b.,..+...`_.....qry.?]..<>.L....+..R........d..uO...v.G..q..VMw.......`.<..{{...o.;}0.US..O..u..v<x..%s..Tu`...Uvw.[.nw....C.?....?..!v ..-E..2.....n.;+.?.....ua8...i....$)W.....\..7...0EC.h.&e.6..D,YDA..W.Na!.T..$k..;..2..ju(.1,D}LdY=..a.>\|k....NE/.A...}{+'V/..W%#..o)a.S....c!P8..UI.".n.{.. .$..y.:K......i......-..!,XL.....>....J..G....X7..@L.L...h-.p..%R?.>e.......=....@O......w/.....2.....L..taJV.HJ...gV.H.C.z...n.P?...v....[.9e.O<-..:......5......D.(9...<X

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	dropped
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 381x381, segment length 16, baseline, precision 8, 240x53, components 3
Category:	downloaded
Size (bytes):	4965
Entropy (8bit):	7.636578821598369
Encrypted:	false
SSDEEP:	96:SG2FsYMsc0rb+ZMdFpvhbxvOgGIKy29w6Qcmcetb:SG2VMCDFpvhVvOgG179w6Qcm1
MD5:	1DC8D728FCD59E3456F1BCC599987816
SHA1:	4F9C60993A063C9470258CC3EAA3F99865C037C7
SHA-256:	AA46C28B6701F807E3B4450E8719E3DF56E9173443A941B39D58ED13F8333769
SHA-512:	B295BA408E0AB633BF70421C755D3E93FEBE28CEB02DA5C3FE3E273B8757935A8599736B1771C13D8FAF87B82A1984C1FC6E92DB603FA9C4A893AFE152C5FD4D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauthimages.net/dbd5a2dd-ebuwtroprxsqonwy2n8z4s0iw7gb0u-ycuo77htkuf4/logintenantbranding/0/bannerlogo?ts=637805376984720579
Preview:	......JFIF.....}.}.....@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................5..............................................2.............................!1..".2A#BQ.aq%3S.................................................!1A............?.....@ .......@ .......@ .......@ .......@ ......u..<.@.n..[....u.C&Qt7....-CU..=...JO@.......

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
Reputation:	low
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 381x381, segment length 16, baseline, precision 8, 240x53, components 3
Category:	dropped
Size (bytes):	4965
Entropy (8bit):	7.636578821598369
Encrypted:	false
SSDEEP:	96:SG2FsYMsc0rb+ZMdFpvhbxvOgGIKy29w6Qcmcetb:SG2VMCDFpvhVvOgG179w6Qcm1
MD5:	1DC8D728FCD59E3456F1BCC599987816
SHA1:	4F9C60993A063C9470258CC3EAA3F99865C037C7
SHA-256:	AA46C28B6701F807E3B4450E8719E3DF56E9173443A941B39D58ED13F8333769
SHA-512:	B295BA408E0AB633BF70421C755D3E93FEBE28CEB02DA5C3FE3E273B8757935A8599736B1771C13D8FAF87B82A1984C1FC6E92DB603FA9C4A893AFE152C5FD4D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....}.}.....@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................5..............................................2.............................!1..".2A#BQ.aq%3S.................................................!1A............?.....@ .......@ .......@ .......@ .......@ ......u..<.@.n..[....u.C&Qt7....-CU..=...JO@.......

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113378
Category:	downloaded
Size (bytes):	20400
Entropy (8bit):	7.980289584022803
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGGwDO8Ua:8pmm7ZFM+ObGGUIjN5PJV3PDDUa
MD5:	F0DE9A98DBDFA8C02742CE6D92FB2524
SHA1:	CDEC682AEB9E39EDCCC2374DAB26F04DB754A8B5
SHA-256:	FAF4294F27A542B0F9EA2A7CB2711529AB027CD84A5F5BADFAE752100855E6BE
SHA-512:	856FC9AB199997E69A9487372BC0083564F7115B3E0678CF1D542B9864E9A88D5FFB85697FD93538DC9439071E3BCD4B8BCCBFC610E1A45DE104D6362D8ADCD9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449728
Category:	dropped
Size (bytes):	122269
Entropy (8bit):	7.9974362643305215
Encrypted:	true
SSDEEP:	3072:DqMdt2M2z1jeNS76MAxjW1EZgVzuqZ+qNotqrG8/yiKJSgJF:jc1NUxCECVzuqZN7/9sSC
MD5:	D2625A3B7A80F9E0F6BFD8FDBEEDB164
SHA1:	A1114F7EE86956E5F6DF604B2C3F25107AA3F124
SHA-256:	C6DDC0AE20A875A5E972A9961A6D139C7E28E64CCEE0CE47BA0CC294B7DEAD16
SHA-512:	F4D2F226DFFC191C21739BC6814ECC502A4B0D62E928F2526786B3AF774737E628C8E550ACBCDF99EEF455E034C5264439B4A8EE08D33D45CE9AE76FF5B513F1
Malicious:	false
Reputation:	low
Preview:	...........{w.8.8.....fn..(...J...'..v.gb..wS..Y..ud.+.y....?.$%.SU.{.=..y.,.\|. .. ......si...S..z...4.\|v}\....(].Fg...........4.\|V...v..R.....N....NX\......$.g...Q.'s...{q......Ke..rKWv....U..Am......._..CR...sX..\... f.E....9.....8.$..9.{.F.....Kv.J1KJ.0J.x?..!B.Zcj....8t..s...........8_...L...U..ie..\|.JIXz.....x.`Z...bj......I..a.,z...~)..D...%.2....-M#;@...`..i......cTt.Z.fs...L/.8..s...R..^...J.?.0.W..K.z.h..Z.5....d...>L..a1.:.......C.G........?c^....,]-...q8..@.u.b.,..+...`_.....qry.?]..<>.L....+..R........d..uO...v.G..q..VMw.......`.<..{{...o.;}0.US..O..u..v<x..%s..Tu`...Uvw.[.nw....C.?....?..!v ..-E..2.....n.;+.?.....ua8...i....$)W.....\..7...0EC.h.&e.6..D,YDA..W.Na!.T..$k..;..2..ju(.1,D}LdY=..a.>\|k....NE/.A...}{+'V/..W%#..o)a.S....c!P8..UI.".n.{.. .$..y.:K......i......-..!,XL.....>....J..G....X7..@L.L...h-.p..%R?.>e.......=....@O......w/.....2.....L..taJV.HJ...gV.H.C.z...n.P?...v....[.9e.O<-..:......5......D.(9...<X

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 02:46:52.175463915 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:52.175509930 CET	443	49735	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:52.175604105 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:52.175954103 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:52.176001072 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:52.176130056 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:52.176178932 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:52.176208973 CET	443	49735	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:52.176502943 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:52.176521063 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.169588089 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.176285028 CET	443	49735	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.217513084 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.217519999 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.438895941 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.438940048 CET	443	49735	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.442050934 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.442080975 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.442832947 CET	443	49735	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.442924023 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.443209887 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.443273067 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.469095945 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.469578981 CET	443	49735	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.471167088 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.471230984 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.471524000 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.471554995 CET	443	49735	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.514682055 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.514689922 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.514694929 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.563865900 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:53.728404999 CET	443	49735	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.728621006 CET	443	49735	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:53.728703976 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:54.215426922 CET	49735	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:54.215471983 CET	443	49735	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:54.232214928 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:54.279412031 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:54.444077015 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:54.444147110 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:54.444359064 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:54.459258080 CET	49736	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:54.459279060 CET	443	49736	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:54.462387085 CET	49738	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:54.462413073 CET	443	49738	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:54.462488890 CET	49738	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:54.463504076 CET	49738	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:54.463516951 CET	443	49738	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:54.491406918 CET	49739	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:46:54.491483927 CET	443	49739	172.217.16.196	192.168.2.4
Oct 28, 2024 02:46:54.491631985 CET	49739	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:46:54.492556095 CET	49739	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:46:54.492588043 CET	443	49739	172.217.16.196	192.168.2.4
Oct 28, 2024 02:46:55.130208969 CET	443	49738	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:55.130569935 CET	49738	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:55.130585909 CET	443	49738	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:55.131762028 CET	443	49738	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:55.132302999 CET	49738	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:55.132473946 CET	443	49738	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:55.132478952 CET	49738	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:55.175373077 CET	443	49738	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:55.186949015 CET	49738	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:55.303762913 CET	443	49738	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:55.303942919 CET	443	49738	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:55.304018974 CET	49738	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:55.306430101 CET	49738	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:55.306443930 CET	443	49738	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:55.355300903 CET	443	49739	172.217.16.196	192.168.2.4
Oct 28, 2024 02:46:55.375370026 CET	49739	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:46:55.375433922 CET	443	49739	172.217.16.196	192.168.2.4
Oct 28, 2024 02:46:55.376312971 CET	443	49739	172.217.16.196	192.168.2.4
Oct 28, 2024 02:46:55.376379967 CET	49739	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:46:55.392637014 CET	49741	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:55.392720938 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:55.392802000 CET	49741	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:55.393316031 CET	49741	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:55.393347025 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:55.483697891 CET	49739	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:46:55.483814955 CET	443	49739	172.217.16.196	192.168.2.4
Oct 28, 2024 02:46:55.538768053 CET	49739	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:46:55.538793087 CET	443	49739	172.217.16.196	192.168.2.4
Oct 28, 2024 02:46:55.580550909 CET	49739	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:46:55.893779993 CET	49742	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:55.893867970 CET	443	49742	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:55.893984079 CET	49742	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:55.896792889 CET	49742	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:55.896846056 CET	443	49742	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:56.100955009 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:56.102332115 CET	49741	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:56.102386951 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:56.103545904 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:56.104351997 CET	49741	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:56.104533911 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:56.104681969 CET	49741	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:56.147347927 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:56.756515026 CET	443	49742	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:56.756606102 CET	49742	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:56.759785891 CET	49742	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:56.759805918 CET	443	49742	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:56.760215044 CET	443	49742	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:56.798209906 CET	49742	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:56.839335918 CET	443	49742	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:57.045371056 CET	443	49742	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:57.045433998 CET	443	49742	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:57.045555115 CET	49742	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:57.045803070 CET	49742	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:57.045830011 CET	443	49742	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:57.070058107 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:57.070146084 CET	49741	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:57.070195913 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:57.070240974 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:57.070296049 CET	49741	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:57.099883080 CET	49741	443	192.168.2.4	35.169.104.34
Oct 28, 2024 02:46:57.099917889 CET	443	49741	35.169.104.34	192.168.2.4
Oct 28, 2024 02:46:57.224925041 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:57.224961996 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:57.225029945 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:57.225476027 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:57.225495100 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:58.066423893 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:58.066504002 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:58.067886114 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:58.067898989 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:58.068226099 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:58.069250107 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:58.111366987 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:58.312203884 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:58.312283039 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:58.312369108 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:58.315845013 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:58.315869093 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:58.315884113 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:46:58.315891027 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 02:46:59.202192068 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:46:59.202259064 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:46:59.202406883 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:46:59.202661991 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:46:59.202692986 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.285046101 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.285329103 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.285372972 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.287010908 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.287085056 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.288199902 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.288290977 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.288377047 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.329802036 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.329827070 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.375567913 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.525480986 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.566061020 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.648483038 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.648535013 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.648561954 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.648576975 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.648602009 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.648603916 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.648636103 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.648639917 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.648653984 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.648669958 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.648694038 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.648720980 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.648777008 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.649837017 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.649878025 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.649913073 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.649971962 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.649996996 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.697884083 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.769828081 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.769841909 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.769861937 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.769911051 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.769942045 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.769967079 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.769990921 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.772442102 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.772464037 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.772527933 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.772547007 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.772577047 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.772610903 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.774426937 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.774447918 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.774493933 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.774507046 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.774533987 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.774553061 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.811503887 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.811563969 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.811589956 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.811604977 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.811633110 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.811652899 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.811662912 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.852745056 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.891571045 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.891635895 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.891652107 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.891669035 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.891696930 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.891716957 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.892467022 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.892515898 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.892545938 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.892558098 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.892582893 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.892605066 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.904865026 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.904917002 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.904932976 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.904947996 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.904973984 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.905083895 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.905134916 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.909244061 CET	49745	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.909275055 CET	443	49745	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.944449902 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.944473982 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:00.944684029 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.946887970 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:00.946902037 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:01.999243975 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:01.999646902 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:01.999664068 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.001862049 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.001955986 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.002500057 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.002639055 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.002964973 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.002973080 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.046580076 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.236105919 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.283785105 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.355962992 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.356005907 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.356023073 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.356043100 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.356076956 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.356089115 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.356100082 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.356121063 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.356127977 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.356148005 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.356152058 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.356246948 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.356256008 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.358313084 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.358356953 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.358382940 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.358388901 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.358396053 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.358423948 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.358442068 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.475821018 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.475851059 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.475900888 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.475908995 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.475938082 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.475956917 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.477340937 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.477364063 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.477411985 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.477418900 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.477446079 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.477452993 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.479163885 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.479186058 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.479252100 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.479258060 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.479348898 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.481014013 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.481034994 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.481077909 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.481084108 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.481111050 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.481120110 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.595736980 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.595765114 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.595822096 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.595832109 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.595863104 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.595877886 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.596077919 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.596100092 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.596132994 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.596138954 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.596163988 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.596178055 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.596405029 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.596462965 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.596462011 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.596487045 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.596510887 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:02.596513987 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.596559048 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.596759081 CET	49750	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:02.596771002 CET	443	49750	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:03.045061111 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.045105934 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.045178890 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.046736002 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.046763897 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.051755905 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.051822901 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.051902056 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.052283049 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.052309990 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.052372932 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.052786112 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.052822113 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.053035021 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.053057909 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.253901005 CET	49723	80	192.168.2.4	93.184.221.240
Oct 28, 2024 02:47:03.259783030 CET	80	49723	93.184.221.240	192.168.2.4
Oct 28, 2024 02:47:03.259959936 CET	49723	80	192.168.2.4	93.184.221.240
Oct 28, 2024 02:47:03.788011074 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.788280010 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.788311005 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.789170027 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.789242983 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.790297031 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.790361881 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.790539980 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.790558100 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.792901039 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.793123007 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.793176889 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.796714067 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.796792030 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.797111988 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.797235966 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.797252893 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.797290087 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.811611891 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.811821938 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.811840057 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.812841892 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.812946081 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.813401937 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.813467026 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.813656092 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.813673019 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.844647884 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.844804049 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.844825029 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:03.859970093 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:03.891940117 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.026700020 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.026720047 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.026727915 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.026782990 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.026797056 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.026849985 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.026880026 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.026935101 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.026976109 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.026977062 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.027009964 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.039130926 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.039191961 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.039212942 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.039266109 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.039268017 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.039341927 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.039372921 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.039376974 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.039398909 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.039400101 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.039431095 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.039437056 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.039449930 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.039453983 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.039477110 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.044492960 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.044544935 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.044574022 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.044590950 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.044615030 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.044641972 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.044667959 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.047672033 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.047725916 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.047738075 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.047780991 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.048033953 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.048064947 CET	443	49758	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.048089981 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.048235893 CET	49758	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.063473940 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.063505888 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.063513041 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.063569069 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.063580036 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.063597918 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.063616991 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.063641071 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.063648939 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.063648939 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.063687086 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.063687086 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.064919949 CET	49759	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.064965010 CET	443	49759	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.077699900 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.077775002 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.077923059 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.078404903 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.078437090 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.158735037 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.158783913 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.158814907 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.158832073 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.158859968 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.158880949 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.163456917 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.163499117 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.163531065 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.163546085 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.163573980 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.163705111 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.165819883 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.165863991 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.165924072 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.165942907 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.165970087 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.165987968 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.276910067 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.276957035 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.277003050 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.277039051 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.277065039 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.277090073 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.277766943 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.277810097 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.277859926 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.277875900 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.277906895 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.277929068 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.281233072 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.281331062 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.281351089 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.281388998 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.281454086 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.282825947 CET	49757	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.282855988 CET	443	49757	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.294564962 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.294640064 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.294712067 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.294954062 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.294972897 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.322406054 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.322452068 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.322503090 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.322710037 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.322726965 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.347783089 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.347804070 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.348021030 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.348218918 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.348232985 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.811891079 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.836647987 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.836687088 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.837574959 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.837635994 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.839009047 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.839065075 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.839164972 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.879365921 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.890255928 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:04.890268087 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:04.952652931 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.050167084 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.051778078 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.054100037 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.054117918 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.054125071 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.054158926 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.054183006 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.054183960 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.054193974 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.054212093 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.054225922 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.054240942 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.054254055 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.054263115 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.054284096 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.054328918 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.072594881 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.072613955 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.073596001 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.073658943 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.078800917 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.092021942 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.092088938 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.093790054 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.093920946 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.093934059 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.094122887 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.094130993 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.095163107 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.095225096 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.097467899 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.097575903 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.111288071 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.111301899 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.114712000 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.114888906 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.131012917 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.131095886 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.137439013 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.137449026 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.137615919 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.137629986 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.155972004 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.187236071 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.187236071 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.275285959 CET	49763	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.275307894 CET	443	49763	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293013096 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293035030 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293040991 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293068886 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293081999 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293092012 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293134928 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.293154955 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293207884 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.293231010 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.293250084 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293293953 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.293298960 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293317080 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.293361902 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.295494080 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.295551062 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.295572042 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.295589924 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.295614958 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.295630932 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.295650959 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.295653105 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.295685053 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.295687914 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.295707941 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.295737982 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.320696115 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.320719957 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.320727110 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.320751905 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.320772886 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.320787907 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.320796013 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.320856094 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.320872068 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.320903063 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.384922981 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.384942055 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.384994030 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.385018110 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.385040045 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.385521889 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.385880947 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.385905027 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.385947943 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.385965109 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.386003971 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.386012077 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.386025906 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.386056900 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.388900042 CET	443	49739	172.217.16.196	192.168.2.4
Oct 28, 2024 02:47:05.388950109 CET	443	49739	172.217.16.196	192.168.2.4
Oct 28, 2024 02:47:05.389048100 CET	49739	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:47:05.414999008 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.415047884 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.415083885 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.415092945 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.415134907 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.415158987 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.427994967 CET	49765	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.428019047 CET	443	49765	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.438163996 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.438185930 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.438246965 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.438257933 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.438322067 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.501077890 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.501111984 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.501177073 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.501185894 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.501226902 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.503499985 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.503515959 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.503571987 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.503577948 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.503622055 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.504744053 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.504775047 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.504854918 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.504863977 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.504890919 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.504903078 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.505178928 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.505196095 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.505250931 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.505256891 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.505305052 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.506710052 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.506731987 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.506789923 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.506798029 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.506820917 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.506840944 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.508599997 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.508620977 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.508667946 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.508676052 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.508704901 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.508723974 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.535226107 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.535248995 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.535294056 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.535301924 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.535320044 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.535343885 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.555768013 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.555783987 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.555816889 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.555867910 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.555875063 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.555885077 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.555917978 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.555939913 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.558645964 CET	49766	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.558662891 CET	443	49766	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.623519897 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.623585939 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.623601913 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.623615980 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.623656034 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.658891916 CET	49739	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:47:05.658924103 CET	443	49739	172.217.16.196	192.168.2.4
Oct 28, 2024 02:47:05.659347057 CET	49767	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.659410000 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.659492016 CET	49767	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.659631014 CET	49768	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.659671068 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.659744978 CET	49768	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.659818888 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.659868956 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.660068035 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.660335064 CET	49767	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.660356045 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.660465956 CET	49768	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.660481930 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.660692930 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.660712957 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:05.662502050 CET	49764	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:05.662508965 CET	443	49764	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.367686033 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.367743015 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.367840052 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.368463993 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.368478060 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.369115114 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.369214058 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.369298935 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.369609118 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.369651079 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.399069071 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.400794029 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.402822018 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.408320904 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.408333063 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.408597946 CET	49767	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.408631086 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.409094095 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.409750938 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.409818888 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.410037041 CET	49767	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.410123110 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.410459995 CET	49768	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.410470963 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.410773993 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.410840034 CET	49767	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.411652088 CET	49768	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.411715031 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.412832022 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.412913084 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.413657904 CET	49768	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.414227009 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.414233923 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.451364040 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.459331989 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.461574078 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.538953066 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.539006948 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.539067030 CET	49767	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.539082050 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.539161921 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.539212942 CET	49767	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.541429996 CET	49767	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.541445971 CET	443	49767	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.542052031 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.542069912 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.542157888 CET	49768	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.542176962 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.542346954 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.542391062 CET	49768	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.542393923 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.542438030 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.542480946 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.542490959 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.542516947 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.542915106 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.764586926 CET	49768	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.764600039 CET	443	49768	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.775218010 CET	49769	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.775242090 CET	443	49769	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.778090000 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:06.778177023 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:06.778268099 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:06.778664112 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:06.778697968 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:06.783771992 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.783834934 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.783934116 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.784238100 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.784274101 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.785768032 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.785783052 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.785877943 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.787935972 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.787946939 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.789644957 CET	49777	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.789664984 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:06.789819956 CET	49777	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.790117979 CET	49777	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:06.790128946 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.107760906 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.110093117 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.161765099 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.161777973 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.386121988 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.386164904 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.386419058 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.386480093 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.386850119 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.387121916 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.387449980 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.387535095 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.388120890 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.388705969 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.388814926 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.388858080 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.431355000 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.435323954 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.438597918 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.535078049 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.535543919 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.535559893 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.536566019 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.536634922 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.537123919 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.537194967 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.537502050 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.537508011 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.538748980 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.539208889 CET	49777	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.539221048 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.540657997 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.540752888 CET	49777	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.541363955 CET	49777	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.541443110 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.541790962 CET	49777	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.541800022 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.578130960 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.593533039 CET	49777	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.632206917 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.632230997 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.632240057 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.632280111 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.632302046 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.632334948 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.632344007 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.632350922 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.632358074 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.632365942 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.632390022 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.632395029 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.632411003 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.632437944 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.632467985 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.633057117 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.633080959 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.633089066 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.633105993 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.633114100 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.633121967 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.633147955 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.633208990 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.633244038 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.633270025 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.635654926 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.635689020 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.635737896 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.635737896 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.635827065 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.635847092 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.635896921 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.670861006 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.670881987 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.670932055 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.670942068 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.670985937 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.673405886 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.673427105 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.673480034 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.673557043 CET	49777	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.701486111 CET	49771	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.701500893 CET	443	49771	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.702284098 CET	49777	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.702305079 CET	443	49777	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.707494020 CET	49776	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.707499981 CET	443	49776	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.750339031 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.750391960 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.750442982 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.750535011 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.750576973 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.750750065 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.751574993 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.751617908 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.751648903 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.751663923 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.751709938 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.751770020 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.753317118 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.753360987 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.753408909 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.753422976 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.753453970 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.753475904 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.755165100 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.755206108 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.755244017 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.755255938 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.755283117 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.755469084 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.807046890 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:07.807288885 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:07.807348967 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:07.808317900 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:07.808379889 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:07.850955009 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.851212978 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.851258993 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.852247953 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.852315903 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.852916956 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.852981091 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.853185892 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.867932081 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.867979050 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.868005991 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.868037939 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.868065119 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.868092060 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.868107080 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.868120909 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.868182898 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.868196964 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.868324041 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.868566990 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.868655920 CET	49772	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.868684053 CET	443	49772	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.895345926 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.899262905 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.899288893 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.945836067 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.993849993 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.993865967 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.993904114 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:07.993904114 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.993957043 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.994647980 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:07.994678020 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:08.144164085 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:08.144248962 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:08.145665884 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:08.145715952 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:08.186825991 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:08.375473976 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:08.375591040 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:08.375634909 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:08.375654936 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:08.375715017 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:08.398154020 CET	49774	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:08.398185968 CET	443	49774	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:08.430090904 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:08.430135965 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:08.430350065 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:08.431343079 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:08.431360960 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:09.135001898 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.135088921 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.135165930 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.136265039 CET	49781	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.136380911 CET	443	49781	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.136451006 CET	49781	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.136645079 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.136693001 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.137181997 CET	49781	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.137231112 CET	443	49781	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.480140924 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:09.480397940 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:09.480429888 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:09.481848955 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:09.481931925 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:09.482388020 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:09.482471943 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:09.482577085 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:09.482593060 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:09.531210899 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:09.716605902 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:09.716862917 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:09.716928959 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:09.716963053 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:09.717003107 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:09.731023073 CET	49778	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:47:09.731048107 CET	443	49778	152.199.21.175	192.168.2.4
Oct 28, 2024 02:47:09.870467901 CET	443	49781	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.870773077 CET	49781	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.870796919 CET	443	49781	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.871253967 CET	443	49781	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.871787071 CET	49781	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.871876001 CET	443	49781	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.871903896 CET	49781	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.873971939 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.874939919 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.874978065 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.875467062 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.876183033 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.876280069 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.876436949 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:09.915333986 CET	443	49781	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.919367075 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:09.921691895 CET	49781	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.000519037 CET	443	49781	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.000587940 CET	443	49781	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.000693083 CET	49781	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.002269983 CET	49781	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.002305984 CET	443	49781	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.009047031 CET	49783	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.009104013 CET	443	49783	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.009177923 CET	49783	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.009403944 CET	49783	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.009434938 CET	443	49783	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.116970062 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.116996050 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.117021084 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.117060900 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.117075920 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.117093086 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.117127895 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.126475096 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.126494884 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.126564026 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.126574993 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.126596928 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.126633883 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.127296925 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.127363920 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.127372026 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.127389908 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.127415895 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.127444029 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.139101028 CET	49780	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.139111996 CET	443	49780	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.157252073 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.157326937 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.157421112 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.157752037 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.157783985 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.741065025 CET	443	49783	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.741309881 CET	49783	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.741370916 CET	443	49783	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.741847038 CET	443	49783	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.742172003 CET	49783	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.742261887 CET	443	49783	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.742286921 CET	49783	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.783371925 CET	443	49783	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.795943975 CET	49783	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.872195959 CET	443	49783	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.872267008 CET	443	49783	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.872354031 CET	49783	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.873275042 CET	49783	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.873342037 CET	443	49783	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.878699064 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.878936052 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.878978014 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.879475117 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.879806995 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.879903078 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:10.880028009 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:10.923332930 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:11.128350019 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:11.128376961 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:11.128396988 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:11.128454924 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:11.128499985 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:11.128531933 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:11.128549099 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:11.134426117 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:11.134448051 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:11.134505033 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:11.134521008 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:11.134552956 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:11.134699106 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:11.135024071 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:11.135082960 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:11.135092974 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:11.135210991 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:11.137191057 CET	49784	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:11.137218952 CET	443	49784	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:39.554430962 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:39.554482937 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:39.554594994 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:39.555167913 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:39.555182934 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.316222906 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.316308975 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.320507050 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.320517063 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.321655989 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.331753016 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.375377893 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.547755957 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.547813892 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.547868967 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.547894001 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.547905922 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.547960997 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.583403111 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.583453894 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.583498001 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.583506107 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.583564997 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.666380882 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.666429996 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.666491032 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.666500092 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.666563988 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.701503992 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.701565027 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.701618910 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.701625109 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.701786041 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.701786041 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.703274012 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.703340054 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.703344107 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.703371048 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.703408957 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.703433037 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.784621000 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.784667969 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.784728050 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.784734964 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.784770012 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.784790993 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.785579920 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.785623074 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.785656929 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.785662889 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.785698891 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.785726070 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.819550037 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.819617987 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.819647074 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.819714069 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.819719076 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.819792032 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.820694923 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.820738077 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.820766926 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.820771933 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.820817947 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.822356939 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.822402954 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.822438002 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.822443962 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.822494030 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.823400974 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.823441982 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.823477983 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.823483944 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.823497057 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.823527098 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.824383974 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.824428082 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.824465990 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.824470997 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.824527979 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.875221014 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.911400080 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.911452055 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.911492109 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.911499023 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.911567926 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.911590099 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.911655903 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.911662102 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.911705971 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.911763906 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:40.911838055 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.911838055 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.911854029 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:40.911861897 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.039563894 CET	49788	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.039594889 CET	443	49788	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.039674044 CET	49788	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.041758060 CET	49789	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.041809082 CET	443	49789	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.041877985 CET	49789	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.043656111 CET	49790	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.043668032 CET	443	49790	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.043732882 CET	49790	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.045623064 CET	49791	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.045643091 CET	443	49791	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.045732975 CET	49791	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.046005011 CET	49790	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.046020985 CET	443	49790	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.046314955 CET	49788	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.046327114 CET	443	49788	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.046736956 CET	49791	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.046768904 CET	443	49791	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.047077894 CET	49789	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.047095060 CET	443	49789	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.049531937 CET	49792	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.049550056 CET	443	49792	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.049623013 CET	49792	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.049931049 CET	49792	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.049938917 CET	443	49792	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.773632050 CET	443	49791	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.774552107 CET	49791	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.774580956 CET	443	49791	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.775374889 CET	49791	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.775388956 CET	443	49791	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.776632071 CET	443	49790	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.777710915 CET	49790	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.777746916 CET	443	49790	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.778172016 CET	49790	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.778184891 CET	443	49790	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.786472082 CET	443	49788	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.787489891 CET	49788	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.787508965 CET	443	49788	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.788996935 CET	49788	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.789010048 CET	443	49788	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.797394037 CET	443	49789	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.798067093 CET	443	49792	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.798408985 CET	49789	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.798439026 CET	443	49789	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.799237013 CET	49789	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.799248934 CET	443	49789	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.800013065 CET	49792	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.800055027 CET	443	49792	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.800636053 CET	49792	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.800642014 CET	443	49792	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.911345959 CET	443	49791	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.911366940 CET	443	49791	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.911416054 CET	443	49791	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.911441088 CET	49791	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.911480904 CET	49791	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.911484957 CET	443	49790	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.911509991 CET	443	49790	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.911561966 CET	443	49790	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.911567926 CET	49790	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.911606073 CET	49790	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.911866903 CET	49791	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.911890984 CET	443	49791	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.911935091 CET	49791	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.911947966 CET	443	49791	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.914427996 CET	49790	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.914427996 CET	49790	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.914448977 CET	443	49790	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.914459944 CET	443	49790	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.917000055 CET	443	49788	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.917161942 CET	443	49788	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.917256117 CET	49788	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.918061018 CET	49793	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.918154955 CET	443	49793	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.918235064 CET	49793	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.918394089 CET	49788	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.918409109 CET	443	49788	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.918437958 CET	49788	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.918446064 CET	443	49788	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.920833111 CET	49793	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.920872927 CET	443	49793	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.923051119 CET	49794	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.923135042 CET	443	49794	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.923233986 CET	49794	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.923976898 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.924000978 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.924108028 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.924231052 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.924257994 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.924396992 CET	49794	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.924432039 CET	443	49794	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.935560942 CET	443	49792	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.935702085 CET	443	49792	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.935854912 CET	49792	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.935900927 CET	49792	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.935900927 CET	49792	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.935924053 CET	443	49792	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.935946941 CET	443	49792	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.940725088 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.940767050 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.940812111 CET	443	49789	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.940833092 CET	443	49789	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.940876961 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.940886021 CET	443	49789	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.940916061 CET	49789	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.940960884 CET	49789	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.941553116 CET	49789	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.941565990 CET	443	49789	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.941608906 CET	49789	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.941622019 CET	443	49789	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.943800926 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.943820953 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.947299004 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.947345018 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:41.947504997 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.947890043 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:41.947917938 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.647962093 CET	443	49793	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.648714066 CET	49793	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.648794889 CET	443	49793	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.649971962 CET	49793	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.650002003 CET	443	49793	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.655451059 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.655986071 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.656002998 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.656620026 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.656632900 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.663794041 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.664535046 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.664560080 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.665291071 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.665297985 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.670660019 CET	443	49794	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.671343088 CET	49794	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.671401024 CET	443	49794	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.672245026 CET	49794	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.672259092 CET	443	49794	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.688323975 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.688968897 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.688994884 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.690220118 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.690234900 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.776731014 CET	443	49793	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.776865959 CET	443	49793	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.777234077 CET	49793	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.777465105 CET	49793	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.777503967 CET	443	49793	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.777529955 CET	49793	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.777544975 CET	443	49793	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.784738064 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.784910917 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.785111904 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.785650969 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.785682917 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.785763979 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.786052942 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.786052942 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.786070108 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.786091089 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.788187027 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.788207054 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.791768074 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.791819096 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.792053938 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.792315960 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.792340994 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.806868076 CET	443	49794	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.807019949 CET	443	49794	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.807096004 CET	49794	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.807286024 CET	49794	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.807337999 CET	443	49794	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.807370901 CET	49794	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.807385921 CET	443	49794	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.811530113 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.811597109 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.811732054 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.811831951 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.811853886 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.820292950 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.820342064 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.820434093 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.820561886 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.820583105 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.820607901 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.820621014 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.824104071 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.824167967 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.824454069 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.825290918 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.825320005 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.825393915 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.825582981 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.825597048 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.825613022 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.825618982 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.825956106 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.825969934 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.830398083 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.830421925 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:42.830579996 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.830724001 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:42.830749035 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.543389082 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.544145107 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.544166088 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.545408010 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.545418978 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.562172890 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.563380957 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.570348978 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.583755016 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.603590012 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.603748083 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.613183022 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.613217115 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.622241020 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.622265100 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.627512932 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.646672010 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.646682978 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.659800053 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.659806967 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.663606882 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.663634062 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.665816069 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.665832043 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.666485071 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.666508913 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.667583942 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.667591095 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.676085949 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.676511049 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.676568031 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.686247110 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.686266899 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.686296940 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.686310053 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.717391968 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.717422009 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.717509985 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.718043089 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.718055964 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.755388975 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.756057978 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.756208897 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.756477118 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.756494045 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.756505966 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.756513119 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.760010958 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.760049105 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.760135889 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.760334969 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.760350943 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.786516905 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.786658049 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.786828041 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.786875010 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.786883116 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.786963940 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.786967993 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.789617062 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.789701939 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.789803982 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.790092945 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.790124893 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.793771029 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.794168949 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.794230938 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.794262886 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.794277906 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.794292927 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.794302940 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.796710014 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.796725988 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.796855927 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.797018051 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.797032118 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.801141977 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.802069902 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.802146912 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.802213907 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.802231073 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.802243948 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.802259922 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.804610968 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.804636955 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:43.804795027 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.804968119 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:43.804992914 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.441211939 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.441829920 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.441842079 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.442423105 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.442430019 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.487278938 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.487705946 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.487739086 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.488112926 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.488121986 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.507514000 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.507919073 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.507977962 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.508292913 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.508311987 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.527465105 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.527921915 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.527935982 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.528285027 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.528290033 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.569746017 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.569932938 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.570017099 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.570080996 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.570094109 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.570137978 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.570144892 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.573091030 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.573107004 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.573184967 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.573347092 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.573369026 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.586990118 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.587399960 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.587424994 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.587778091 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.587788105 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.616251945 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.616410971 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.616485119 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.616761923 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.616780043 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.616791010 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.616796970 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.621268988 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.621316910 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.621582031 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.622018099 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.622031927 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.637089968 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.637270927 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.637399912 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.637634993 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.637670040 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.637695074 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.637726068 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.641407967 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.641427994 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.641658068 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.641882896 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.641896009 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.656795025 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.656945944 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.657497883 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.657531977 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.657531977 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.657547951 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.657558918 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.659665108 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.659683943 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.659823895 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.659929991 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.659940958 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.722982883 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.723414898 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.723479986 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.723551035 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.723557949 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.723567009 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.723571062 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.726134062 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.726147890 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:44.726213932 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.726329088 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:44.726337910 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.318773985 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.319369078 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.319386959 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.320077896 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.320085049 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.357726097 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.358134985 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.358160019 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.358534098 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.358541012 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.384501934 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.384927034 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.384938955 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.385427952 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.385432005 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.397063971 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.397481918 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.397496939 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.398015976 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.398021936 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.451056957 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.451390982 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.451438904 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.451811075 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.451890945 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.451906919 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.452287912 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.452353001 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.452409983 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.452419996 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.452430010 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.452434063 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.455821991 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.455899954 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.455981970 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.456125975 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.456159115 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.487853050 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.488219976 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.488279104 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.488312960 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.488332033 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.488344908 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.488351107 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.490796089 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.490840912 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.490914106 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.491063118 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.491095066 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.521671057 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.521912098 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.521964073 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.522033930 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.522038937 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.522061110 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.522063971 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.524384022 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.524430037 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.524583101 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.524724960 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.524750948 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.527848005 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.528383970 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.528775930 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.528810978 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.528825998 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.528839111 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.528844118 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.531069994 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.531116962 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.531183004 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.531291008 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.531335115 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.579102993 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.579246044 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.579336882 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.579390049 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.579390049 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.579415083 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.579441071 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.581582069 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.581660032 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:45.581734896 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.581872940 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:45.581896067 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.204268932 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.205154896 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.205219030 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.205843925 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.205857992 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.250624895 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.251046896 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.251084089 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.251585007 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.251596928 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.257950068 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.258276939 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.258338928 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.258805037 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.258820057 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.293102026 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.293440104 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.293478012 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.293922901 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.293937922 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.315260887 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.315623999 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.315646887 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.316112995 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.316121101 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.337739944 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.337881088 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.337943077 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.338092089 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.338124037 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.338155031 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.338170052 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.340842962 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.340873003 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.341109037 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.341274977 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.341290951 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.379636049 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.379780054 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.379848003 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.379954100 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.379954100 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.379995108 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.380016088 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.382955074 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.382997990 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.383090973 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.383250952 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.383266926 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.393068075 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.393205881 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.393277884 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.393321991 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.393348932 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.393373013 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.393388987 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.395876884 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.395905018 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.395967960 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.396114111 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.396126986 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.425729990 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.425801992 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.425899029 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.425981998 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.426022053 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.426054955 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.426068068 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.428355932 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.428395987 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.428458929 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.428605080 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.428621054 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.443643093 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.443794012 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.443855047 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.443886042 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.443902016 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.443913937 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.443921089 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.445924997 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.445950985 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:46.446012020 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.446158886 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:46.446172953 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.087614059 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.088169098 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.088212967 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.088809967 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.088840008 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.126997948 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.127377033 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.127413034 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.127902031 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.127908945 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.129748106 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.130096912 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.130114079 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.130588055 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.130593061 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.171714067 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.172081947 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.172102928 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.172641993 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.172647953 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.198920965 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.199263096 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.199287891 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.199620962 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.199625969 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.220839977 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.221179008 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.221270084 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.221270084 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.221323013 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.221348047 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.224189043 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.224219084 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.224445105 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.224752903 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.224766970 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.258908033 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.259063959 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.259179115 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.259179115 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.259274960 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.259288073 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.261234999 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.261410952 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.261471033 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.261481047 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.261509895 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.261697054 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.261697054 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.261720896 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.261743069 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.261743069 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.261759043 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.261769056 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.263788939 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.263830900 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.264097929 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.264136076 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.264143944 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.304609060 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.304692030 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.304811001 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.304872990 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.304872990 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.304884911 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.304898977 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.307214975 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.307225943 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.307569981 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.307569981 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.307586908 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.333897114 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.334286928 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.334397078 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.334397078 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.334475040 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.334485054 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.336616039 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.336637974 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.336827993 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.336827993 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.336852074 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.956659079 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.957643032 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.957659960 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.958632946 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.958638906 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.995399952 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.996087074 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.996118069 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:47.997801065 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:47.997807980 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.003611088 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.004293919 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.004329920 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.005851984 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.005861044 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.041821957 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.062504053 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.062520027 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.063541889 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.063560963 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.081794024 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.082828045 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.082839966 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.083772898 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.083779097 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.087336063 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.087658882 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.087769985 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.087847948 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.087872028 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.087887049 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.087893963 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.092247963 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.092344999 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.092689037 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.093072891 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.093122005 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.125049114 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.125125885 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.125883102 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.131262064 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.131278038 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.131319046 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.131326914 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.134516954 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.134717941 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.134843111 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.164397001 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.164397001 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.164433002 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.164447069 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.192297935 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.192368984 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.192423105 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.211781025 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.211913109 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.211980104 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.234013081 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.234013081 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.234031916 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.234045029 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.238970995 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.238987923 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.263865948 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.263952017 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.264044046 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.266980886 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.267029047 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.268887997 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.268929005 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.269009113 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.269294977 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.269323111 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.322449923 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.322479010 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.322573900 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.430877924 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.430927992 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.433939934 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.434041023 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.434124947 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.434851885 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.434936047 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.822751045 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.823251009 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.823297024 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.823715925 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.823730946 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.952735901 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.952836037 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.952898026 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.953473091 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.953473091 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.953511000 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.953535080 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.956252098 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.956295967 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:48.956377029 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.956604004 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:48.956620932 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.004103899 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.004559994 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.004617929 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.005215883 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.005228996 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.014185905 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.014554977 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.014575958 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.014885902 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.014898062 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.134047985 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.134279013 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.134357929 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.134437084 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.134437084 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.134478092 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.134505033 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.137813091 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.137908936 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.138006926 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.138123035 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.138142109 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.147012949 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.147151947 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.147217989 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.147330046 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.147360086 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.147392035 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.147407055 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.149873018 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.149919987 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.149991989 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.150192976 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.150209904 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.165000916 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.165508032 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.165549994 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.166089058 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.166101933 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.181632042 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.182120085 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.182156086 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.182441950 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.182454109 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.312984943 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.313220024 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.313285112 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.313335896 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.313335896 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.313364983 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.313394070 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.315243006 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.315290928 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.315382957 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.315557003 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.315572977 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.383491039 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.383577108 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.383646011 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.383733988 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.383733988 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.383758068 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.383780003 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.389955997 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.389995098 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.390063047 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.390672922 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.390690088 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.688339949 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.700623035 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.700637102 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.702327013 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.702332020 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.827269077 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.827339888 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.827440977 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.828166962 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.828180075 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.865463972 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.865480900 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.865555048 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.869587898 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.869602919 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.900460958 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.910196066 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.910209894 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.910788059 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.910794020 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.920984983 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.922192097 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.922246933 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:49.923826933 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:49.923846960 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.037465096 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.037656069 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.037719011 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.037759066 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.037759066 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.037769079 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.037785053 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.041119099 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.041136026 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.041218996 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.041512012 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.041524887 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.055058956 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.055571079 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.055591106 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.056175947 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.056183100 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.056319952 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.056544065 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.056605101 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.056951046 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.056971073 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.056982994 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.056989908 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.060323000 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.060345888 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.060611010 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.060781956 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.060797930 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.113056898 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.114064932 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.114085913 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.114737034 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.114743948 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.186909914 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.187104940 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.187176943 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.187226057 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.187243938 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.187257051 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.187263966 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.191236973 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.191251993 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.191328049 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.191726923 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.191739082 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.242052078 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.242126942 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.242223024 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.242525101 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.242525101 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.242536068 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.242548943 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.245445013 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.245471954 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.245578051 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.245733976 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.245748043 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.607670069 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.608192921 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.608207941 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.608666897 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.608673096 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.742364883 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.742466927 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.742522955 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.742708921 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.742722988 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.742738962 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.742744923 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.746366978 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.746383905 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.746464968 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.746680975 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.746700048 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.789447069 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.792798996 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.792857885 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.793472052 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.793486118 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.800887108 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.801297903 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.801371098 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.801671982 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.801686049 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.924024105 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.924216032 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.924289942 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.925154924 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.925193071 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.925220013 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.925239086 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.928738117 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.928782940 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.928930998 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.929392099 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.929408073 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.935986996 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.936141014 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.936213017 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.936449051 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.936490059 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.936554909 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.936570883 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.939268112 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.939285040 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.939354897 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.939724922 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.939737082 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.958705902 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.965251923 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.965292931 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.980012894 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.980029106 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.984024048 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.992561102 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.992604017 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:50.999161959 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:50.999198914 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.112086058 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.112224102 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.112293005 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.128268003 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.128357887 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.128446102 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.170932055 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.170932055 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.170974970 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.170999050 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.173619986 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.173648119 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.173662901 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.173670053 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.184211016 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.184243917 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.184470892 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.185770988 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.185784101 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.187159061 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.187201977 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.187294006 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.187710047 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.187726974 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.475389004 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.475802898 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.475824118 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.476407051 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.476413012 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.604969978 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.605067015 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.605129004 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.605277061 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.605277061 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.605292082 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.605302095 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.610075951 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.610116959 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.610323906 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.610603094 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.610615969 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.662442923 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.663199902 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.663209915 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.664155960 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.664161921 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.669850111 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.670214891 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.670250893 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.670782089 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.670789003 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.791789055 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.792099953 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.792155027 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.800570011 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.800726891 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.801839113 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.803404093 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.803428888 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.806222916 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.806242943 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.806299925 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.806307077 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.809129953 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.809179068 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.809375048 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.810818911 CET	49851	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.810841084 CET	443	49851	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.810983896 CET	49851	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.811110973 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.811130047 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.811301947 CET	49851	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.811321974 CET	443	49851	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.924254894 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.924614906 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.924628019 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.924745083 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.925394058 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.925399065 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.926042080 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.926058054 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.926795006 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:51.926801920 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:51.936825037 CET	49724	80	192.168.2.4	93.184.221.240
Oct 28, 2024 02:47:51.942997932 CET	80	49724	93.184.221.240	192.168.2.4
Oct 28, 2024 02:47:51.943059921 CET	49724	80	192.168.2.4	93.184.221.240
Oct 28, 2024 02:47:52.052601099 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.052934885 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.052992105 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.053013086 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.053026915 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.053040028 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.053046942 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.055046082 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.055130005 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.055207014 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.055336952 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.055372953 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.055666924 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.055752993 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.055794001 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.055860996 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.055860996 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.055879116 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.055888891 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.057648897 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.057713985 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.057828903 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.057944059 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.057976007 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.341342926 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.341789007 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.341804028 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.342236996 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.342242002 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.470917940 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.471084118 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.471178055 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.471384048 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.471395016 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.471404076 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.471409082 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.475838900 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.475893021 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.475965977 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.476141930 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.476170063 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.538564920 CET	443	49851	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.539019108 CET	49851	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.539027929 CET	443	49851	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.539550066 CET	49851	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.539556026 CET	443	49851	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.553452969 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.553754091 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.553775072 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.554105043 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.554111004 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.665292025 CET	443	49851	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.665476084 CET	443	49851	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.665533066 CET	49851	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.665587902 CET	49851	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.665587902 CET	49851	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.665600061 CET	443	49851	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.665606976 CET	443	49851	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.668072939 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.668121099 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.668200970 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.668354988 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.668386936 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.693202972 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.693247080 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.693300962 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.693448067 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.693461895 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.693495035 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.693502903 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.695369959 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.695399046 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.695508957 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.695642948 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.695668936 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.796519995 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.796828032 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.796870947 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.797226906 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.797238111 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.802774906 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.803065062 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.803118944 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.803380966 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.803395987 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.928976059 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.929663897 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.929721117 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.929774046 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.929800987 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.929827929 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.929850101 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.932037115 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.932094097 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.932322979 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.932487965 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.932513952 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.939122915 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.939202070 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.939274073 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.939347029 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.939347029 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.939372063 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.939393997 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.941175938 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.941207886 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:52.941279888 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.941395998 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:52.941422939 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.195290089 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.196090937 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.196115971 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.196433067 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.196444988 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.324203968 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.324363947 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.324476004 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.324542999 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.324542999 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.324572086 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.324594021 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.327204943 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.327240944 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.327431917 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.327431917 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.327502966 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.393963099 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.394815922 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.394815922 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.394833088 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.394851923 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.434326887 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.435008049 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.435008049 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.435018063 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.435033083 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.521193027 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.521512032 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.521868944 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.521868944 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.521965981 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.521976948 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.524317980 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.524350882 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.524569988 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.524569988 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.524594069 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.565124035 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.565174103 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.565366030 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.565366030 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.565385103 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.565392971 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.567425013 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.567464113 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.567708015 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.567708015 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.567751884 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.673787117 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.674180984 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.674190044 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.674638987 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.674643993 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.756206036 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.756907940 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.756908894 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.756949902 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.756987095 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.804267883 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.804339886 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.804529905 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.804529905 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.804752111 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.804771900 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.806535006 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.806557894 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.806695938 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.806839943 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.806854010 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.887324095 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.887454033 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.887593985 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.887646914 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.887646914 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.887685061 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.887707949 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.889887094 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.889940023 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:53.890250921 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.890250921 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:53.890309095 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.063512087 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.064338923 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.064338923 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.064367056 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.064399958 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.192761898 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.192959070 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.193084002 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.193130016 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.193130016 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.193152905 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.193173885 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.195571899 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.195619106 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.195676088 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.195806026 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.195823908 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.255973101 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.257817030 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.257829905 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.258300066 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.258305073 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.482028961 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.482373953 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.482435942 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.482711077 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.482723951 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.532488108 CET	49865	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:47:54.532594919 CET	443	49865	172.217.16.196	192.168.2.4
Oct 28, 2024 02:47:54.532790899 CET	49865	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:47:54.533034086 CET	49865	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:47:54.533057928 CET	443	49865	172.217.16.196	192.168.2.4
Oct 28, 2024 02:47:54.605411053 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.605562925 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.605623960 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.605740070 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.605740070 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.605753899 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.605762005 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.608791113 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.608829975 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.608994961 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.609193087 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.609205008 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.610593081 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.611114979 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.611121893 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.611516953 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.611521006 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.615066051 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.615113020 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.615264893 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.615348101 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.615349054 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.615384102 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.615406036 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.617245913 CET	49867	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.617331028 CET	443	49867	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.617408991 CET	49867	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.617587090 CET	49867	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.617623091 CET	443	49867	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.631819010 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.632153988 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.632172108 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.632522106 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.632531881 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.741300106 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.741400957 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.741488934 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.741506100 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.741516113 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.741552114 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.741558075 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.743535042 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.743608952 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.743700027 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.743815899 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.743864059 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.761478901 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.761780977 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.761924982 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.761957884 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.761980057 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.762002945 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.762032986 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.763870955 CET	49869	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.763968945 CET	443	49869	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.764050007 CET	49869	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.764204025 CET	49869	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.764233112 CET	443	49869	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.933552027 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.933986902 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.934006929 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:54.934432983 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:54.934437037 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.078186035 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.078210115 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.078264952 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.078268051 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.078413010 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.078464031 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.078480959 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.078490973 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.078495979 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.081195116 CET	49870	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.081238985 CET	443	49870	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.081393957 CET	49870	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.081597090 CET	49870	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.081626892 CET	443	49870	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.354106903 CET	443	49867	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.355160952 CET	49867	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.355160952 CET	49867	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.355207920 CET	443	49867	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.355243921 CET	443	49867	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.374806881 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.375175953 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.375200987 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.375582933 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.375588894 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.408322096 CET	443	49865	172.217.16.196	192.168.2.4
Oct 28, 2024 02:47:55.408665895 CET	49865	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:47:55.408700943 CET	443	49865	172.217.16.196	192.168.2.4
Oct 28, 2024 02:47:55.409776926 CET	443	49865	172.217.16.196	192.168.2.4
Oct 28, 2024 02:47:55.410262108 CET	49865	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:47:55.410346031 CET	443	49865	172.217.16.196	192.168.2.4
Oct 28, 2024 02:47:55.452305079 CET	49865	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:47:55.479582071 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.480293036 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.480293036 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.480324984 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.480360985 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.502480030 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.502640963 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.502710104 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.502923012 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.502923012 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.502938986 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.502947092 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.505681992 CET	443	49869	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.505814075 CET	49871	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.505897045 CET	443	49871	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.506078959 CET	49869	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.506078959 CET	49871	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.506110907 CET	443	49869	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.506184101 CET	49871	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.506196976 CET	443	49871	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.506722927 CET	49869	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.506733894 CET	443	49869	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.521492004 CET	443	49867	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.521589994 CET	443	49867	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.521769047 CET	49867	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.521842003 CET	49867	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.521842003 CET	49867	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.521869898 CET	443	49867	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.521895885 CET	443	49867	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.526268005 CET	49872	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.526305914 CET	443	49872	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.526493073 CET	49872	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.526493073 CET	49872	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.526546955 CET	443	49872	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.611080885 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.611104965 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.611162901 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.611183882 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.611273050 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.611542940 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.611542940 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.611569881 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.611593008 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.614610910 CET	49873	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.614653111 CET	443	49873	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.614816904 CET	49873	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.615012884 CET	49873	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.615031004 CET	443	49873	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.638256073 CET	443	49869	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.638288975 CET	443	49869	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.638350964 CET	443	49869	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.638398886 CET	49869	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.638597965 CET	49869	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.638597965 CET	49869	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.638824940 CET	49869	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.638854027 CET	443	49869	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.640744925 CET	49874	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.640796900 CET	443	49874	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.640949965 CET	49874	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.641020060 CET	49874	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.641040087 CET	443	49874	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.810332060 CET	443	49870	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.811297894 CET	49870	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.811297894 CET	49870	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.811348915 CET	443	49870	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.811387062 CET	443	49870	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.945621014 CET	443	49870	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.945646048 CET	443	49870	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.945700884 CET	443	49870	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.945736885 CET	49870	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.945934057 CET	49870	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.945934057 CET	49870	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.945979118 CET	49870	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.946007967 CET	443	49870	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.948352098 CET	49875	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.948365927 CET	443	49875	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:55.948503017 CET	49875	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.948625088 CET	49875	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:55.948632956 CET	443	49875	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.262058973 CET	443	49871	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.262439966 CET	49871	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.262465954 CET	443	49871	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.262919903 CET	49871	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.262932062 CET	443	49871	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.263595104 CET	443	49872	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.263912916 CET	49872	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.263932943 CET	443	49872	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.264405966 CET	49872	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.264413118 CET	443	49872	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.346820116 CET	443	49873	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.347136974 CET	49873	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.347153902 CET	443	49873	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.347467899 CET	49873	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.347474098 CET	443	49873	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.374228001 CET	443	49874	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.374680042 CET	49874	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.374703884 CET	443	49874	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.375164032 CET	49874	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.375169992 CET	443	49874	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.394649982 CET	443	49871	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.394794941 CET	443	49871	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.394870996 CET	49871	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.394973040 CET	49871	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.394973993 CET	49871	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.394999027 CET	443	49871	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.395035028 CET	443	49871	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.395139933 CET	443	49872	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.395325899 CET	443	49872	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.395381927 CET	49872	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.395580053 CET	49872	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.395606041 CET	443	49872	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.395621061 CET	49872	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.395627975 CET	443	49872	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.398082018 CET	49877	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.398092985 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.398129940 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.398149967 CET	443	49877	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.398205042 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.398241997 CET	49877	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.398364067 CET	49877	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.398391008 CET	443	49877	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.398454905 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.398478031 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.477691889 CET	443	49873	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.477773905 CET	443	49873	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.477868080 CET	49873	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.477916956 CET	49873	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.477924109 CET	443	49873	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.477933884 CET	49873	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.477940083 CET	443	49873	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.480006933 CET	49878	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.480040073 CET	443	49878	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.480117083 CET	49878	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.480238914 CET	49878	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.480263948 CET	443	49878	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.505497932 CET	443	49874	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.505553007 CET	443	49874	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.505639076 CET	49874	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.505723953 CET	49874	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.505734921 CET	443	49874	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.505745888 CET	49874	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.505750895 CET	443	49874	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.507616043 CET	49879	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.507656097 CET	443	49879	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.507822037 CET	49879	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.507952929 CET	49879	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.507982016 CET	443	49879	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.686304092 CET	443	49875	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.686686039 CET	49875	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.686692953 CET	443	49875	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.687083960 CET	49875	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.687088013 CET	443	49875	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.816109896 CET	443	49875	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.816179991 CET	443	49875	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.816315889 CET	49875	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.816364050 CET	49875	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.816369057 CET	443	49875	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.816376925 CET	49875	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.816380024 CET	443	49875	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.819128990 CET	49880	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.819210052 CET	443	49880	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:56.819287062 CET	49880	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.819430113 CET	49880	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:56.819457054 CET	443	49880	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.152124882 CET	443	49877	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.152605057 CET	49877	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.152640104 CET	443	49877	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.153055906 CET	49877	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.153069019 CET	443	49877	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.178087950 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.178478003 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.178553104 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.178843021 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.178862095 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.226376057 CET	443	49878	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.227089882 CET	49878	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.227089882 CET	49878	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.227118015 CET	443	49878	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.227152109 CET	443	49878	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.245716095 CET	443	49879	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.246428967 CET	49879	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.246428967 CET	49879	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.246471882 CET	443	49879	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.246495008 CET	443	49879	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.285027981 CET	443	49877	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.285201073 CET	443	49877	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.285327911 CET	49877	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.285327911 CET	49877	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.285621881 CET	49877	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.285646915 CET	443	49877	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.287667990 CET	49881	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.287764072 CET	443	49881	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.287914991 CET	49881	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.288012981 CET	49881	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.288036108 CET	443	49881	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.324830055 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.324939966 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.325180054 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.325428963 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.325457096 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.325499058 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.325532913 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.327774048 CET	49882	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.327806950 CET	443	49882	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.329973936 CET	49882	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.333816051 CET	49882	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.333830118 CET	443	49882	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.362364054 CET	443	49878	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.362431049 CET	443	49878	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.362612963 CET	49878	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.362612963 CET	49878	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.362665892 CET	49878	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.362680912 CET	443	49878	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.364871979 CET	49883	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.364918947 CET	443	49883	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.365056992 CET	49883	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.365160942 CET	49883	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.365190029 CET	443	49883	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.377445936 CET	443	49879	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.377506018 CET	443	49879	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.377666950 CET	49879	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.377808094 CET	49879	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.377808094 CET	49879	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.377830982 CET	443	49879	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.377850056 CET	443	49879	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.381829023 CET	49884	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.381908894 CET	443	49884	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.382126093 CET	49884	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.382126093 CET	49884	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.382203102 CET	443	49884	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.580379963 CET	443	49880	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.581145048 CET	49880	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.581146002 CET	49880	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.581197023 CET	443	49880	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.581219912 CET	443	49880	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.714246035 CET	443	49880	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.714387894 CET	443	49880	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.714514017 CET	49880	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.714596033 CET	49880	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.714596033 CET	49880	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.714639902 CET	443	49880	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.714665890 CET	443	49880	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.717027903 CET	49885	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.717070103 CET	443	49885	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:57.717209101 CET	49885	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.717282057 CET	49885	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:57.717288971 CET	443	49885	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.041124105 CET	443	49881	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.041589975 CET	49881	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.041618109 CET	443	49881	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.042120934 CET	49881	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.042129040 CET	443	49881	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.070384979 CET	443	49882	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.071002960 CET	49882	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.071019888 CET	49882	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.071058035 CET	443	49882	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.071103096 CET	443	49882	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.110333920 CET	443	49884	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.110944986 CET	49884	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.110944986 CET	49884	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.110996008 CET	443	49884	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.111035109 CET	443	49884	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.111109972 CET	443	49883	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.111625910 CET	49883	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.111625910 CET	49883	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.111649990 CET	443	49883	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.111663103 CET	443	49883	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.170559883 CET	443	49881	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.170655012 CET	443	49881	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.170794010 CET	443	49881	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.170831919 CET	49881	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.170902014 CET	49881	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.170902014 CET	49881	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.170960903 CET	49881	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.170978069 CET	443	49881	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.173254967 CET	49886	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.173309088 CET	443	49886	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.173610926 CET	49886	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.173610926 CET	49886	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.173676968 CET	443	49886	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.210808039 CET	443	49882	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.210969925 CET	443	49882	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.211020947 CET	49882	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.211060047 CET	49882	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.211085081 CET	443	49882	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.211110115 CET	49882	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.211122990 CET	443	49882	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.212965012 CET	49887	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.212989092 CET	443	49887	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.213072062 CET	49887	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.213182926 CET	49887	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.213191986 CET	443	49887	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.240246058 CET	443	49884	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.240353107 CET	443	49884	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.240431070 CET	49884	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.240477085 CET	49884	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.240477085 CET	49884	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.240500927 CET	443	49884	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.240521908 CET	443	49884	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.242786884 CET	49888	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.242866993 CET	443	49888	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.242947102 CET	49888	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.243115902 CET	49888	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.243149996 CET	443	49888	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.243412971 CET	443	49883	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.243465900 CET	443	49883	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.243506908 CET	443	49883	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.243542910 CET	49883	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.243572950 CET	49883	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.243684053 CET	49883	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.243694067 CET	443	49883	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.243705034 CET	49883	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.243710995 CET	443	49883	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.245630026 CET	49889	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.245667934 CET	443	49889	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.245851994 CET	49889	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.245956898 CET	49889	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.245975018 CET	443	49889	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.451148033 CET	443	49885	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.451600075 CET	49885	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.451612949 CET	443	49885	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.452146053 CET	49885	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.452152014 CET	443	49885	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.581131935 CET	443	49885	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.581202030 CET	443	49885	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.581351042 CET	49885	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.581402063 CET	49885	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.581402063 CET	49885	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.581417084 CET	443	49885	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.581424952 CET	443	49885	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.583930969 CET	49890	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.583971977 CET	443	49890	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.584067106 CET	49890	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.584196091 CET	49890	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.584223032 CET	443	49890	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.921996117 CET	443	49886	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.923197985 CET	49886	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.923243046 CET	443	49886	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.923744917 CET	49886	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.923759937 CET	443	49886	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.945158005 CET	443	49887	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.945482016 CET	49887	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.945493937 CET	443	49887	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.945866108 CET	49887	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.945873022 CET	443	49887	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.985867977 CET	443	49888	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.986799955 CET	49888	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.986860991 CET	443	49888	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:58.987355947 CET	49888	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:58.987373114 CET	443	49888	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.019001007 CET	443	49889	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.035792112 CET	49889	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.035815954 CET	443	49889	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.036339998 CET	49889	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.036348104 CET	443	49889	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.052791119 CET	443	49886	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.052987099 CET	443	49886	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.053050995 CET	49886	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.053407907 CET	49886	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.053417921 CET	443	49886	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.053431034 CET	49886	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.053436041 CET	443	49886	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.058748960 CET	49891	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.058765888 CET	443	49891	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.058971882 CET	49891	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.059180021 CET	49891	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.059190989 CET	443	49891	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.080055952 CET	443	49887	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.080670118 CET	443	49887	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.080739975 CET	443	49887	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.080811977 CET	49887	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.080836058 CET	49887	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.080924988 CET	49887	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.080924988 CET	49887	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.080941916 CET	443	49887	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.080962896 CET	443	49887	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.083142996 CET	49892	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.083225012 CET	443	49892	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.083376884 CET	49892	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.083539963 CET	49892	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.083590031 CET	443	49892	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.118432999 CET	443	49888	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.118479967 CET	443	49888	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.118602991 CET	49888	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.118750095 CET	49888	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.118788004 CET	443	49888	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.118819952 CET	49888	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.118834972 CET	443	49888	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.121119022 CET	49893	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.121191025 CET	443	49893	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.121273994 CET	49893	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.121449947 CET	49893	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.121483088 CET	443	49893	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.168927908 CET	443	49889	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.168986082 CET	443	49889	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.169045925 CET	49889	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.169234991 CET	49889	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.169246912 CET	443	49889	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.169259071 CET	49889	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.169264078 CET	443	49889	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.171538115 CET	49894	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.171569109 CET	443	49894	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.171648026 CET	49894	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.171847105 CET	49894	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.171874046 CET	443	49894	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.329051018 CET	443	49890	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.331108093 CET	49890	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.331126928 CET	443	49890	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.331688881 CET	49890	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.331695080 CET	443	49890	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.461410046 CET	443	49890	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.461482048 CET	443	49890	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.461539984 CET	49890	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.461817026 CET	49890	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.461843014 CET	443	49890	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.466342926 CET	49895	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.466409922 CET	443	49895	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.466497898 CET	49895	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.466675043 CET	49895	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.466706038 CET	443	49895	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.792983055 CET	443	49891	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.798454046 CET	49891	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.798506975 CET	443	49891	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.801803112 CET	49891	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.801815033 CET	443	49891	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.803873062 CET	443	49892	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.805191994 CET	49892	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.805257082 CET	443	49892	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.808867931 CET	49892	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.808883905 CET	443	49892	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.849885941 CET	443	49893	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.856221914 CET	49893	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.856298923 CET	443	49893	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.859814882 CET	49893	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.859828949 CET	443	49893	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.917211056 CET	443	49894	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.917584896 CET	49894	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.917639971 CET	443	49894	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.918021917 CET	49894	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.918034077 CET	443	49894	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.927370071 CET	443	49891	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.927436113 CET	443	49891	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.927537918 CET	443	49891	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.927611113 CET	49891	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.927711964 CET	49891	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.927711964 CET	49891	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.927757978 CET	443	49891	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.927778959 CET	443	49891	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.930809975 CET	49896	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.930907011 CET	443	49896	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.931000948 CET	49896	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.931107998 CET	49896	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.931128025 CET	443	49896	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.942286968 CET	443	49892	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.942385912 CET	443	49892	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.942461967 CET	49892	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.942565918 CET	49892	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.942593098 CET	443	49892	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.942640066 CET	49892	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.942656994 CET	443	49892	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.944704056 CET	49897	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.944789886 CET	443	49897	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.944883108 CET	49897	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.945029020 CET	49897	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.945056915 CET	443	49897	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.985476971 CET	443	49893	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.985518932 CET	443	49893	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.985555887 CET	443	49893	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.985620975 CET	49893	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.985738993 CET	49893	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.985770941 CET	443	49893	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.985810995 CET	49893	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.985826015 CET	443	49893	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.987905025 CET	49898	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.987935066 CET	443	49898	13.107.246.45	192.168.2.4
Oct 28, 2024 02:47:59.988009930 CET	49898	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.988131046 CET	49898	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:47:59.988157034 CET	443	49898	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.048768044 CET	443	49894	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.048820972 CET	443	49894	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.048880100 CET	49894	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.049098969 CET	49894	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.049114943 CET	443	49894	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.051405907 CET	49899	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.051444054 CET	443	49899	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.051506996 CET	49899	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.051624060 CET	49899	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.051651955 CET	443	49899	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.224736929 CET	443	49895	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.225223064 CET	49895	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.225270033 CET	443	49895	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.225704908 CET	49895	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.225718975 CET	443	49895	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.360409021 CET	443	49895	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.360479116 CET	443	49895	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.360615969 CET	49895	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.360672951 CET	49895	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.360683918 CET	443	49895	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.360717058 CET	49895	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.360723972 CET	443	49895	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.363389969 CET	49900	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.363481045 CET	443	49900	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.363564014 CET	49900	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.363724947 CET	49900	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.363756895 CET	443	49900	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.655086994 CET	443	49896	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.655721903 CET	49896	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.655767918 CET	443	49896	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.656395912 CET	49896	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.656408072 CET	443	49896	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.676656008 CET	443	49897	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.677031994 CET	49897	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.677090883 CET	443	49897	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.677416086 CET	49897	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.677432060 CET	443	49897	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.723846912 CET	443	49898	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.724277020 CET	49898	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.724308968 CET	443	49898	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.724694967 CET	49898	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.724706888 CET	443	49898	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.777825117 CET	443	49899	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.778351068 CET	49899	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.778393030 CET	443	49899	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.778810024 CET	49899	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.778820992 CET	443	49899	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.781778097 CET	443	49896	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.781925917 CET	443	49896	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.782088995 CET	49896	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.782150030 CET	49896	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.782150030 CET	49896	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.782187939 CET	443	49896	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.782210112 CET	443	49896	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.784873009 CET	49901	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.784909964 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.785022974 CET	49901	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.785177946 CET	49901	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.785195112 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.807997942 CET	443	49897	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.809988976 CET	443	49897	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.810046911 CET	49897	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.810056925 CET	443	49897	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.810116053 CET	49897	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.810158014 CET	49897	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.810189962 CET	443	49897	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.810215950 CET	49897	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.810230970 CET	443	49897	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.812151909 CET	49902	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.812196016 CET	443	49902	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.812263012 CET	49902	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.812423944 CET	49902	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.812441111 CET	443	49902	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.855629921 CET	443	49898	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.855689049 CET	443	49898	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.855802059 CET	49898	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.855863094 CET	49898	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.855884075 CET	443	49898	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.855907917 CET	49898	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.855921984 CET	443	49898	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.858402967 CET	49903	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.858427048 CET	443	49903	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.858489037 CET	49903	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.858611107 CET	49903	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.858627081 CET	443	49903	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.914282084 CET	443	49899	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.914331913 CET	443	49899	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.914458036 CET	49899	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.914501905 CET	49899	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.914525032 CET	443	49899	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.914563894 CET	49899	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.914576054 CET	443	49899	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.916449070 CET	49904	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.916486979 CET	443	49904	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:00.916552067 CET	49904	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.916671038 CET	49904	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:00.916699886 CET	443	49904	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.105750084 CET	443	49900	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.106195927 CET	49900	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.106211901 CET	443	49900	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.106724977 CET	49900	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.106730938 CET	443	49900	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.237987995 CET	443	49900	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.238063097 CET	443	49900	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.238132000 CET	49900	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.238312006 CET	49900	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.238339901 CET	443	49900	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.238389015 CET	49900	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.238406897 CET	443	49900	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.241292000 CET	49905	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.241355896 CET	443	49905	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.241605997 CET	49905	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.241770983 CET	49905	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.241805077 CET	443	49905	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.527414083 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.528729916 CET	49901	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.528742075 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.529866934 CET	49901	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.529874086 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.545509100 CET	443	49902	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.546958923 CET	49902	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.546979904 CET	443	49902	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.547835112 CET	49902	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.547842979 CET	443	49902	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.575752020 CET	443	49903	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.576744080 CET	49903	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.576769114 CET	443	49903	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.577678919 CET	49903	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.577686071 CET	443	49903	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.658181906 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.658251047 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.658349991 CET	49901	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.658363104 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.658384085 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.658452988 CET	49901	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.658766031 CET	49901	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.658791065 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.658819914 CET	49901	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.658828974 CET	443	49901	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.664339066 CET	49906	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.664396048 CET	443	49906	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.664482117 CET	49906	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.664700031 CET	49906	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.664731979 CET	443	49906	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.675524950 CET	443	49902	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.675621986 CET	443	49902	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.675699949 CET	49902	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.675808907 CET	49902	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.675841093 CET	443	49902	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.675867081 CET	49902	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.675879955 CET	443	49902	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.678667068 CET	49907	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.678718090 CET	443	49907	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.678788900 CET	49907	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.679059982 CET	49907	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.679086924 CET	443	49907	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.705215931 CET	443	49903	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.705363989 CET	443	49903	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.705451012 CET	49903	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.705733061 CET	49903	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.705756903 CET	443	49903	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.705774069 CET	49903	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.705780029 CET	443	49903	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.707473040 CET	443	49904	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.707988977 CET	49904	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.708028078 CET	443	49904	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.708672047 CET	49904	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.708683014 CET	443	49904	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.710335016 CET	49908	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.710351944 CET	443	49908	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.710557938 CET	49908	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.710964918 CET	49908	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.710980892 CET	443	49908	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.841348886 CET	443	49904	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.841388941 CET	443	49904	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.841636896 CET	49904	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.841811895 CET	49904	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.841837883 CET	443	49904	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.841866016 CET	49904	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.841881037 CET	443	49904	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.846187115 CET	49909	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.846249104 CET	443	49909	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.846457005 CET	49909	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.846699953 CET	49909	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:01.846714973 CET	443	49909	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:01.986463070 CET	443	49905	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.031162024 CET	49905	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.319715023 CET	49905	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.319761992 CET	443	49905	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.327152014 CET	49905	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.327167988 CET	443	49905	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.403642893 CET	443	49906	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.404304028 CET	49906	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.404349089 CET	443	49906	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.405165911 CET	49906	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.405179024 CET	443	49906	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.406822920 CET	443	49907	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.407557964 CET	49907	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.407593012 CET	443	49907	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.408761978 CET	49907	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.408772945 CET	443	49907	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.442060947 CET	443	49908	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.442698002 CET	49908	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.442709923 CET	443	49908	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.443531036 CET	49908	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.443536997 CET	443	49908	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.453897953 CET	443	49905	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.453928947 CET	443	49905	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.453978062 CET	443	49905	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.453993082 CET	49905	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.454025030 CET	49905	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.454205990 CET	49905	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.454231977 CET	443	49905	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.461810112 CET	49911	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.461857080 CET	443	49911	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.461922884 CET	49911	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.462126017 CET	49911	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.462140083 CET	443	49911	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.533076048 CET	443	49906	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.533221960 CET	443	49906	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.533298969 CET	49906	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.533795118 CET	49906	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.533824921 CET	443	49906	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.533852100 CET	49906	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.533868074 CET	443	49906	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.537197113 CET	443	49907	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.537394047 CET	443	49907	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.537467003 CET	49907	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.539977074 CET	49912	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.540025949 CET	443	49912	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.540206909 CET	49907	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.540239096 CET	49912	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.540252924 CET	443	49907	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.540286064 CET	49907	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.540298939 CET	443	49907	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.543797016 CET	49913	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.543879986 CET	443	49913	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.543972969 CET	49913	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.544390917 CET	49913	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.544439077 CET	443	49913	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.544487953 CET	49912	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.544506073 CET	443	49912	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.573292017 CET	443	49908	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.573344946 CET	443	49908	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.573544979 CET	49908	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.573872089 CET	49908	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.573884964 CET	443	49908	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.573899031 CET	49908	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.573904991 CET	443	49908	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.576592922 CET	49914	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.576606989 CET	443	49914	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.576775074 CET	49914	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.576936960 CET	49914	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.576947927 CET	443	49914	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.588660955 CET	443	49909	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.589025021 CET	49909	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.589076996 CET	443	49909	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.589464903 CET	49909	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.589478970 CET	443	49909	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.722130060 CET	443	49909	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.722162962 CET	443	49909	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.722199917 CET	443	49909	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.722225904 CET	49909	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.722276926 CET	49909	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.722369909 CET	49909	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.722398043 CET	443	49909	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.722449064 CET	49909	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.722462893 CET	443	49909	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.724385023 CET	49915	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.724436045 CET	443	49915	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:02.724577904 CET	49915	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.724708080 CET	49915	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:02.724740982 CET	443	49915	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.185910940 CET	443	49911	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.195616007 CET	49911	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.195647001 CET	443	49911	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.196532965 CET	49911	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.196538925 CET	443	49911	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.280812025 CET	443	49913	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.283751965 CET	443	49912	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.288321018 CET	49913	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.288384914 CET	443	49913	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.289702892 CET	49913	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.289722919 CET	443	49913	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.290642023 CET	49912	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.290709019 CET	443	49912	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.291924000 CET	49912	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.291939020 CET	443	49912	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.317914963 CET	443	49914	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.318461895 CET	49914	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.318480015 CET	443	49914	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.319283962 CET	49914	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.319294930 CET	443	49914	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.320842981 CET	443	49911	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.320909977 CET	443	49911	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.320995092 CET	49911	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.321249008 CET	49911	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.321249008 CET	49911	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.321281910 CET	443	49911	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.321305990 CET	443	49911	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.326636076 CET	49916	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.326689959 CET	443	49916	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.326853991 CET	49916	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.327112913 CET	49916	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.327142000 CET	443	49916	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.413502932 CET	443	49913	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.413655043 CET	443	49913	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.413734913 CET	49913	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.413835049 CET	49913	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.413835049 CET	49913	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.413872004 CET	443	49913	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.413896084 CET	443	49913	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.417985916 CET	49917	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.418077946 CET	443	49917	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.418169022 CET	49917	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.418375969 CET	49917	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.418410063 CET	443	49917	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.418889046 CET	443	49912	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.419020891 CET	443	49912	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.419079065 CET	49912	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.419090986 CET	443	49912	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.419147015 CET	49912	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.419251919 CET	49912	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.419281960 CET	443	49912	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.419306993 CET	49912	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.419337034 CET	443	49912	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.421668053 CET	49918	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.421688080 CET	443	49918	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.421809912 CET	49918	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.421976089 CET	49918	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.421994925 CET	443	49918	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.450994015 CET	443	49914	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.451019049 CET	443	49914	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.451054096 CET	443	49914	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.451078892 CET	49914	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.451105118 CET	49914	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.451327085 CET	49914	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.451327085 CET	49914	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.451349020 CET	443	49914	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.451369047 CET	443	49914	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.454617977 CET	49919	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.454648018 CET	443	49919	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.454719067 CET	49919	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.454843998 CET	49919	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.454881907 CET	443	49919	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.496233940 CET	443	49915	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.496659040 CET	49915	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.496687889 CET	443	49915	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.497507095 CET	49915	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.497520924 CET	443	49915	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.637918949 CET	443	49915	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.638003111 CET	443	49915	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.638082027 CET	49915	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.638694048 CET	49915	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.638742924 CET	443	49915	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.638773918 CET	49915	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.638789892 CET	443	49915	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.647691965 CET	49921	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.647726059 CET	443	49921	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:03.647831917 CET	49921	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.648884058 CET	49921	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:03.648900032 CET	443	49921	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.053949118 CET	443	49916	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.063467026 CET	49916	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.063534021 CET	443	49916	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.064300060 CET	49916	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.064316034 CET	443	49916	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.142263889 CET	443	49918	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.142877102 CET	49918	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.142910957 CET	443	49918	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.143630981 CET	49918	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.143642902 CET	443	49918	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.152264118 CET	443	49917	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.152730942 CET	49917	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.152771950 CET	443	49917	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.153270960 CET	49917	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.153286934 CET	443	49917	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.186956882 CET	443	49919	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.187585115 CET	49919	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.187596083 CET	443	49919	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.188184977 CET	49919	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.188189983 CET	443	49919	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.188277960 CET	443	49916	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.188312054 CET	443	49916	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.188353062 CET	443	49916	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.188375950 CET	49916	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.188435078 CET	49916	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.188596010 CET	49916	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.188613892 CET	443	49916	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.188625097 CET	49916	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.188632011 CET	443	49916	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.192826986 CET	49922	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.192864895 CET	443	49922	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.192991972 CET	49922	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.193284035 CET	49922	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.193304062 CET	443	49922	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.271815062 CET	443	49918	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.271850109 CET	443	49918	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.271893978 CET	443	49918	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.271912098 CET	49918	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.271941900 CET	49918	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.272310019 CET	49918	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.272330999 CET	443	49918	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.272352934 CET	49918	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.272363901 CET	443	49918	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.275757074 CET	49923	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.275783062 CET	443	49923	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.275852919 CET	49923	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.276055098 CET	49923	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.276068926 CET	443	49923	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.281064987 CET	443	49917	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.281212091 CET	443	49917	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.281290054 CET	49917	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.281343937 CET	49917	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.281377077 CET	443	49917	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.281403065 CET	49917	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.281420946 CET	443	49917	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.284178019 CET	49924	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.284208059 CET	443	49924	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.284321070 CET	49924	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.284482002 CET	49924	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.284495115 CET	443	49924	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.318388939 CET	443	49919	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.318542957 CET	443	49919	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.318671942 CET	49919	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.318754911 CET	49919	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.318754911 CET	49919	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.318773985 CET	443	49919	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.318883896 CET	443	49919	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.321485996 CET	49925	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.321568012 CET	443	49925	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.321813107 CET	49925	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.321970940 CET	49925	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.322002888 CET	443	49925	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.428658962 CET	443	49921	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.429116011 CET	49921	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.429142952 CET	443	49921	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.429733038 CET	49921	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.429738998 CET	443	49921	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.568331003 CET	443	49921	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.568480015 CET	443	49921	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.568567038 CET	49921	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.568861008 CET	49921	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.568888903 CET	443	49921	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.568913937 CET	49921	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.568929911 CET	443	49921	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.572555065 CET	49926	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.572581053 CET	443	49926	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.572859049 CET	49926	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.573139906 CET	49926	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.573152065 CET	443	49926	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.934341908 CET	443	49922	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.935091972 CET	49922	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.935116053 CET	443	49922	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:04.935882092 CET	49922	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:04.935889959 CET	443	49922	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.005984068 CET	443	49923	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.009860039 CET	443	49924	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.014153004 CET	49923	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.014188051 CET	443	49923	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.017780066 CET	49923	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.017796993 CET	443	49923	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.048361063 CET	49924	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.048376083 CET	443	49924	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.052057981 CET	443	49925	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.053462982 CET	49924	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.053469896 CET	443	49924	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.066042900 CET	443	49922	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.066112995 CET	443	49922	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.066391945 CET	49922	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.078440905 CET	49925	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.078499079 CET	443	49925	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.078869104 CET	49925	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.078881979 CET	443	49925	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.079011917 CET	49922	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.079032898 CET	443	49922	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.079056025 CET	49922	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.079062939 CET	443	49922	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.143909931 CET	443	49923	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.143934965 CET	443	49923	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.143979073 CET	443	49923	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.144033909 CET	49923	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.151042938 CET	49927	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.151097059 CET	443	49927	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.151205063 CET	49923	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.151211977 CET	49927	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.151215076 CET	443	49923	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.151295900 CET	49923	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.151302099 CET	443	49923	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.158376932 CET	49927	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.158405066 CET	443	49927	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.161133051 CET	49928	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.161200047 CET	443	49928	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.161494970 CET	49928	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.161921978 CET	49928	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.161955118 CET	443	49928	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.177412033 CET	443	49924	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.177550077 CET	443	49924	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.177644968 CET	49924	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.177709103 CET	49924	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.177709103 CET	49924	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.177720070 CET	443	49924	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.177726984 CET	443	49924	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.181041002 CET	49929	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.181118965 CET	443	49929	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.181190968 CET	49929	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.181507111 CET	49929	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.181538105 CET	443	49929	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.204037905 CET	443	49925	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.204056978 CET	443	49925	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.204086065 CET	443	49925	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.204114914 CET	49925	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.204160929 CET	49925	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.205600023 CET	49925	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.205611944 CET	443	49925	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.205679893 CET	49925	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.205686092 CET	443	49925	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.210587978 CET	49930	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.210622072 CET	443	49930	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.210766077 CET	49930	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.210872889 CET	49930	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.210897923 CET	443	49930	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.311031103 CET	443	49926	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.312108994 CET	49926	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.312127113 CET	443	49926	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.312895060 CET	49926	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.312901020 CET	443	49926	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.425403118 CET	443	49865	172.217.16.196	192.168.2.4
Oct 28, 2024 02:48:05.425535917 CET	443	49865	172.217.16.196	192.168.2.4
Oct 28, 2024 02:48:05.425606966 CET	49865	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:48:05.442671061 CET	443	49926	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.442814112 CET	443	49926	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.442898035 CET	49926	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.443020105 CET	49926	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.443037033 CET	443	49926	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.449670076 CET	49931	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.449724913 CET	443	49931	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.449824095 CET	49931	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.450160980 CET	49931	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.450190067 CET	443	49931	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.900727987 CET	443	49927	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.901279926 CET	49927	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.901321888 CET	443	49927	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.901702881 CET	49927	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.901717901 CET	443	49927	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.917936087 CET	443	49928	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.918431044 CET	49928	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.918464899 CET	443	49928	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.918780088 CET	49928	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.918792009 CET	443	49928	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.922348976 CET	443	49929	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.922745943 CET	49929	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.922832966 CET	443	49929	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.923350096 CET	49929	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.923365116 CET	443	49929	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.945791006 CET	443	49930	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.946293116 CET	49930	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.946307898 CET	443	49930	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:05.946608067 CET	49930	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:05.946613073 CET	443	49930	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.036370039 CET	443	49927	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.036515951 CET	443	49927	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.036825895 CET	49927	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.036885023 CET	49927	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.036916971 CET	443	49927	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.036943913 CET	49927	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.036957979 CET	443	49927	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.039947987 CET	49932	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.040023088 CET	443	49932	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.040319920 CET	49932	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.040473938 CET	49932	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.040493965 CET	443	49932	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.050055981 CET	443	49928	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.050122023 CET	443	49928	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.050185919 CET	49928	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.050462961 CET	49928	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.050477028 CET	443	49928	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.050489902 CET	49928	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.050496101 CET	443	49928	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.052443981 CET	443	49929	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.052505970 CET	443	49929	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.052607059 CET	443	49929	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.052846909 CET	49929	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.053384066 CET	49929	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.053421021 CET	443	49929	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.053447962 CET	49929	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.053462982 CET	443	49929	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.057607889 CET	49933	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.057686090 CET	443	49933	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.057830095 CET	49933	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.058129072 CET	49933	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.058160067 CET	443	49933	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.059792995 CET	49934	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.059823990 CET	443	49934	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.060164928 CET	49934	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.060318947 CET	49934	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.060350895 CET	443	49934	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.077532053 CET	443	49930	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.077581882 CET	443	49930	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.077847958 CET	49930	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.078605890 CET	49930	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.078619957 CET	443	49930	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.078759909 CET	49930	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.078773975 CET	443	49930	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.083476067 CET	49935	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.083503962 CET	443	49935	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.083744049 CET	49935	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.083955050 CET	49935	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.083976984 CET	443	49935	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.195959091 CET	443	49931	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.196273088 CET	49931	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.196316957 CET	443	49931	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.196619987 CET	49931	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.196631908 CET	443	49931	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.327739954 CET	443	49931	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.327800989 CET	443	49931	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.327898979 CET	443	49931	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.327966928 CET	49931	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.328110933 CET	49931	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.328133106 CET	443	49931	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.328176022 CET	49931	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.328188896 CET	443	49931	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.330291986 CET	49936	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.330332041 CET	443	49936	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.330411911 CET	49936	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.330524921 CET	49936	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.330553055 CET	443	49936	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.761535883 CET	443	49932	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.761919022 CET	49932	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.761950970 CET	443	49932	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.762463093 CET	49932	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.762476921 CET	443	49932	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.787827969 CET	443	49934	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.788208961 CET	49934	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.788228989 CET	443	49934	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.788769007 CET	49934	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.788780928 CET	443	49934	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.806236029 CET	443	49935	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.806652069 CET	49935	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.806696892 CET	443	49935	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.807023048 CET	49935	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.807034969 CET	443	49935	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.810158014 CET	443	49933	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.810600042 CET	49933	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.810630083 CET	443	49933	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.811156988 CET	49933	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.811167002 CET	443	49933	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.889925957 CET	443	49932	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.890021086 CET	443	49932	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.890225887 CET	49932	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.890372038 CET	49932	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.890372038 CET	49932	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.890405893 CET	443	49932	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.890434027 CET	443	49932	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.892950058 CET	49937	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.893003941 CET	443	49937	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.893081903 CET	49937	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.893270969 CET	49937	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.893296957 CET	443	49937	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.918859005 CET	443	49934	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.918924093 CET	443	49934	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.918987989 CET	49934	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.919105053 CET	49934	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.919105053 CET	49934	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.919123888 CET	443	49934	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.919146061 CET	443	49934	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.920991898 CET	49938	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.921070099 CET	443	49938	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.921153069 CET	49938	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.921413898 CET	49938	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.921446085 CET	443	49938	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.939955950 CET	443	49935	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.940004110 CET	443	49935	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.940063953 CET	49935	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.940184116 CET	49935	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.940206051 CET	443	49935	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.940253019 CET	49935	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.940267086 CET	443	49935	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.942079067 CET	49939	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.942106962 CET	443	49939	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.942177057 CET	49939	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.942296028 CET	49939	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.942318916 CET	443	49939	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.946137905 CET	443	49933	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.946322918 CET	443	49933	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.946491003 CET	49933	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.946546078 CET	49933	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.946546078 CET	49933	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.946563005 CET	443	49933	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.946583033 CET	443	49933	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.948292971 CET	49940	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.948322058 CET	443	49940	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:06.948493004 CET	49940	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.948626041 CET	49940	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:06.948652983 CET	443	49940	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.113105059 CET	443	49936	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.113595963 CET	49936	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.113641977 CET	443	49936	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.114109993 CET	49936	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.114124060 CET	443	49936	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.141833067 CET	49865	443	192.168.2.4	172.217.16.196
Oct 28, 2024 02:48:07.141884089 CET	443	49865	172.217.16.196	192.168.2.4
Oct 28, 2024 02:48:07.248475075 CET	443	49936	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.248645067 CET	443	49936	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.248717070 CET	49936	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.248796940 CET	49936	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.248830080 CET	443	49936	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.248857975 CET	49936	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.248871088 CET	443	49936	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.251494884 CET	49941	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.251543999 CET	443	49941	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.251696110 CET	49941	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.251863956 CET	49941	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.251893997 CET	443	49941	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.633080959 CET	443	49937	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.633445024 CET	49937	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.633480072 CET	443	49937	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.633838892 CET	49937	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.633852005 CET	443	49937	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.656227112 CET	443	49938	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.656841040 CET	49938	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.656876087 CET	443	49938	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.657387972 CET	49938	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.657402992 CET	443	49938	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.679198980 CET	443	49939	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.679560900 CET	49939	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.679584026 CET	443	49939	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.679919004 CET	49939	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.679929018 CET	443	49939	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.697299957 CET	443	49940	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.697629929 CET	49940	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.697686911 CET	443	49940	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.697973967 CET	49940	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.697993994 CET	443	49940	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.763341904 CET	443	49937	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.763411999 CET	443	49937	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.763583899 CET	49937	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.763668060 CET	49937	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.763703108 CET	443	49937	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.763729095 CET	49937	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.763746977 CET	443	49937	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.766479969 CET	49942	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.766532898 CET	443	49942	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.766602039 CET	49942	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.766762972 CET	49942	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.766789913 CET	443	49942	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.787379980 CET	443	49938	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.787494898 CET	443	49938	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.787559032 CET	49938	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.787625074 CET	49938	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.787625074 CET	49938	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.787656069 CET	443	49938	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.787678957 CET	443	49938	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.789566994 CET	49943	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.789588928 CET	443	49943	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.789819002 CET	49943	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.789947987 CET	49943	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.789958954 CET	443	49943	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.810621023 CET	443	49939	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.810642958 CET	443	49939	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.810672998 CET	443	49939	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.810698032 CET	49939	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.810725927 CET	49939	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.810888052 CET	49939	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.810902119 CET	443	49939	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.810942888 CET	49939	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.810952902 CET	443	49939	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.813241005 CET	49944	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.813302994 CET	443	49944	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.813416004 CET	49944	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.813534975 CET	49944	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.813565969 CET	443	49944	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.829792976 CET	443	49940	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.829919100 CET	443	49940	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.830003023 CET	49940	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.830106020 CET	49940	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.830106974 CET	49940	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.830131054 CET	443	49940	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.830156088 CET	443	49940	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.832005978 CET	49945	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.832037926 CET	443	49945	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:07.832098961 CET	49945	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.832245111 CET	49945	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:07.832259893 CET	443	49945	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.005075932 CET	443	49941	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.005409956 CET	49941	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.005451918 CET	443	49941	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.005790949 CET	49941	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.005804062 CET	443	49941	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.137402058 CET	443	49941	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.137551069 CET	443	49941	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.137640953 CET	49941	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.137706041 CET	49941	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.137706041 CET	49941	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.137748003 CET	443	49941	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.137773991 CET	443	49941	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.139642954 CET	49946	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.139683008 CET	443	49946	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.139930964 CET	49946	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.140124083 CET	49946	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.140145063 CET	443	49946	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.498984098 CET	443	49942	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.499742985 CET	49942	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.499742985 CET	49942	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.499825954 CET	443	49942	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.499855042 CET	443	49942	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.512259960 CET	443	49943	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.512567997 CET	49943	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.512612104 CET	443	49943	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.512919903 CET	49943	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.512932062 CET	443	49943	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.550028086 CET	443	49944	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.550488949 CET	49944	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.550529003 CET	443	49944	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.553828955 CET	49944	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.553841114 CET	443	49944	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.563777924 CET	443	49945	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.564296961 CET	49945	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.564318895 CET	443	49945	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.564518929 CET	49945	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.564523935 CET	443	49945	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.633805990 CET	443	49942	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.633877039 CET	443	49942	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.634066105 CET	49942	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.634066105 CET	49942	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.634066105 CET	49942	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.636025906 CET	49947	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.636044025 CET	443	49947	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.636445999 CET	49947	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.636445999 CET	49947	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.636470079 CET	443	49947	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.644445896 CET	443	49943	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.644469976 CET	443	49943	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.644510984 CET	443	49943	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.644646883 CET	49943	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.644646883 CET	49943	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.644829035 CET	49943	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.644850969 CET	443	49943	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.646476030 CET	49948	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.646547079 CET	443	49948	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.646754026 CET	49948	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.646754026 CET	49948	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.646836996 CET	443	49948	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.681371927 CET	443	49944	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.681427956 CET	443	49944	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.681463003 CET	443	49944	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.681607962 CET	49944	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.681651115 CET	49944	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.681651115 CET	49944	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.681677103 CET	443	49944	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.681701899 CET	443	49944	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.683536053 CET	49949	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.683563948 CET	443	49949	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.683727980 CET	49949	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.683840990 CET	49949	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.683852911 CET	443	49949	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.694356918 CET	443	49945	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.694406033 CET	443	49945	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.694509029 CET	443	49945	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.694555044 CET	49945	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.694645882 CET	49945	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.694645882 CET	49945	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.694662094 CET	49945	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.694669008 CET	443	49945	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.696546078 CET	49950	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.696582079 CET	443	49950	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.696726084 CET	49950	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.696801901 CET	49950	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.696816921 CET	443	49950	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.879168987 CET	443	49946	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.879796982 CET	49946	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.879796982 CET	49946	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.879828930 CET	443	49946	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.879872084 CET	443	49946	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:08.937119007 CET	49942	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:08.937155008 CET	443	49942	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.009378910 CET	443	49946	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.009519100 CET	443	49946	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.009618044 CET	49946	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.009618044 CET	49946	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.009717941 CET	49946	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.009737968 CET	443	49946	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.011348963 CET	49951	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.011387110 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.011569977 CET	49951	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.011569977 CET	49951	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.011605024 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.371381998 CET	443	49947	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.371967077 CET	49947	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.372010946 CET	443	49947	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.372684956 CET	49947	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.372703075 CET	443	49947	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.387396097 CET	443	49948	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.387969971 CET	49948	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.388031960 CET	443	49948	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.388470888 CET	49948	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.388484955 CET	443	49948	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.422754049 CET	443	49949	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.423114061 CET	49949	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.423122883 CET	443	49949	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.423547029 CET	49949	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.423553944 CET	443	49949	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.441936970 CET	443	49950	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.442292929 CET	49950	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.442353010 CET	443	49950	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.442888975 CET	49950	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.442902088 CET	443	49950	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.503494024 CET	443	49947	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.504049063 CET	443	49947	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.504105091 CET	443	49947	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.504112959 CET	49947	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.504165888 CET	49947	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.504326105 CET	49947	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.504359961 CET	443	49947	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.504385948 CET	49947	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.504400969 CET	443	49947	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.507067919 CET	49952	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.507153034 CET	443	49952	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.507242918 CET	49952	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.507411957 CET	49952	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.507446051 CET	443	49952	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.519262075 CET	443	49948	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.519412041 CET	443	49948	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.519478083 CET	49948	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.519630909 CET	49948	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.519630909 CET	49948	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.519675016 CET	443	49948	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.519707918 CET	443	49948	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.521848917 CET	49953	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.521908998 CET	443	49953	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.521976948 CET	49953	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.522177935 CET	49953	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.522208929 CET	443	49953	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.554132938 CET	443	49949	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.554161072 CET	443	49949	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.554208994 CET	443	49949	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.554210901 CET	49949	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.554361105 CET	49949	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.554416895 CET	49949	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.554429054 CET	443	49949	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.554442883 CET	49949	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.554450989 CET	443	49949	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.556334019 CET	49954	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.556370020 CET	443	49954	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.556478977 CET	49954	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.556612968 CET	49954	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.556638002 CET	443	49954	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.573307991 CET	443	49950	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.573339939 CET	443	49950	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.573385954 CET	443	49950	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.573404074 CET	49950	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.573468924 CET	49950	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.573596001 CET	49950	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.573637962 CET	443	49950	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.573667049 CET	49950	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.573682070 CET	443	49950	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.575541973 CET	49955	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.575570107 CET	443	49955	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.575727940 CET	49955	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.575877905 CET	49955	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.575901031 CET	443	49955	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.760585070 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.760909081 CET	49951	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.760920048 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.761372089 CET	49951	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.761380911 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.891957998 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.892035961 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.892086983 CET	49951	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.892102003 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.892148018 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.892256975 CET	49951	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.892457008 CET	49951	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.892468929 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.892486095 CET	49951	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.892493963 CET	443	49951	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.895592928 CET	49956	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.895672083 CET	443	49956	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:09.895747900 CET	49956	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.896071911 CET	49956	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:09.896109104 CET	443	49956	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.226629972 CET	443	49952	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.227035046 CET	49952	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.227089882 CET	443	49952	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.227485895 CET	49952	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.227502108 CET	443	49952	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.262331009 CET	443	49953	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.263071060 CET	49953	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.263071060 CET	49953	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.263111115 CET	443	49953	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.263151884 CET	443	49953	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.289262056 CET	443	49954	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.289567947 CET	49954	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.289602995 CET	443	49954	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.290735006 CET	49954	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.290750980 CET	443	49954	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.312119007 CET	443	49955	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.318133116 CET	49955	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.318170071 CET	443	49955	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.319010973 CET	49955	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.319029093 CET	443	49955	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.356178999 CET	443	49952	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.356261015 CET	443	49952	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.356331110 CET	49952	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.356496096 CET	49952	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.356496096 CET	49952	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.356534004 CET	443	49952	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.356556892 CET	443	49952	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.359983921 CET	49957	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.360065937 CET	443	49957	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.360248089 CET	49957	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.360248089 CET	49957	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.360316992 CET	443	49957	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.402625084 CET	443	49953	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.402873993 CET	443	49953	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.404457092 CET	49953	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.404521942 CET	49953	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.404561043 CET	443	49953	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.404598951 CET	49953	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.404613972 CET	443	49953	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.407944918 CET	49958	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.408020020 CET	443	49958	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.408221960 CET	49958	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.408221960 CET	49958	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.408293962 CET	443	49958	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.420197964 CET	443	49954	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.420253038 CET	443	49954	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.420368910 CET	49954	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.420484066 CET	49954	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.420484066 CET	49954	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.420506954 CET	443	49954	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.420522928 CET	443	49954	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.422796965 CET	49959	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.422830105 CET	443	49959	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.422924995 CET	49959	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.423016071 CET	49959	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.423058987 CET	443	49959	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.446213961 CET	443	49955	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.446275949 CET	443	49955	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.446366072 CET	443	49955	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.446458101 CET	49955	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.446458101 CET	49955	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.446515083 CET	49955	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.446528912 CET	443	49955	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.448509932 CET	49960	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.448577881 CET	443	49960	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.449040890 CET	49960	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.449460030 CET	49960	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.449491024 CET	443	49960	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.855338097 CET	443	49956	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.855917931 CET	49956	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.855950117 CET	443	49956	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.856441021 CET	49956	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.856451988 CET	443	49956	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.995570898 CET	443	49956	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.996032000 CET	443	49956	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.996176958 CET	49956	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.996177912 CET	49956	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.996233940 CET	49956	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.996258020 CET	443	49956	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.999042988 CET	49961	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.999135971 CET	443	49961	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:10.999368906 CET	49961	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.999370098 CET	49961	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:10.999444008 CET	443	49961	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.100519896 CET	443	49957	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.100992918 CET	49957	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.101022005 CET	443	49957	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.101528883 CET	49957	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.101541996 CET	443	49957	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.135337114 CET	443	49958	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.135715961 CET	49958	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.135739088 CET	443	49958	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.136013985 CET	49958	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.136023045 CET	443	49958	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.166368008 CET	443	49959	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.166984081 CET	49959	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.166985035 CET	49959	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.167011023 CET	443	49959	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.167048931 CET	443	49959	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.199039936 CET	443	49960	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.199647903 CET	49960	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.199647903 CET	49960	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.199672937 CET	443	49960	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.199692965 CET	443	49960	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.264858961 CET	443	49958	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.265000105 CET	443	49958	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.265144110 CET	49958	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.265186071 CET	49958	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.265208960 CET	443	49958	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.265232086 CET	49958	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.265245914 CET	443	49958	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.267739058 CET	49962	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.267769098 CET	443	49962	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.267929077 CET	49962	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.268037081 CET	49962	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.268052101 CET	443	49962	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.301784039 CET	443	49959	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.302217960 CET	443	49959	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.302259922 CET	443	49959	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.302282095 CET	49959	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.302321911 CET	49959	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.302361012 CET	49959	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.302361012 CET	49959	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.302397013 CET	443	49959	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.302427053 CET	443	49959	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.304482937 CET	49963	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.304567099 CET	443	49963	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.304641962 CET	49963	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.304780006 CET	49963	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.304817915 CET	443	49963	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.329392910 CET	443	49960	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.329535961 CET	443	49960	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.329586029 CET	49960	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.329622030 CET	49960	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.329632998 CET	443	49960	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.329646111 CET	49960	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.329653025 CET	443	49960	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.331940889 CET	49964	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.332005978 CET	443	49964	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.332073927 CET	49964	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.332179070 CET	49964	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.332226992 CET	443	49964	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.339885950 CET	443	49957	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.341722965 CET	443	49957	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.341782093 CET	443	49957	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.341787100 CET	49957	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.341845036 CET	49957	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.341880083 CET	49957	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.341921091 CET	443	49957	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.341952085 CET	49957	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.341968060 CET	443	49957	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.343828917 CET	49965	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.343857050 CET	443	49965	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.343907118 CET	49965	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.344070911 CET	49965	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.344079018 CET	443	49965	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.748788118 CET	443	49961	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.749454975 CET	49961	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.749490023 CET	443	49961	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.750324965 CET	49961	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.750339985 CET	443	49961	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.879079103 CET	443	49961	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.879509926 CET	443	49961	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.879612923 CET	49961	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.879692078 CET	49961	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.879692078 CET	49961	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.879729033 CET	443	49961	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.879754066 CET	443	49961	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.883169889 CET	49966	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.883227110 CET	443	49966	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:11.883342028 CET	49966	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.883608103 CET	49966	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:11.883635998 CET	443	49966	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.036636114 CET	443	49963	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.037147045 CET	49963	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.037187099 CET	443	49963	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.037559032 CET	49963	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.037570000 CET	443	49963	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.090379953 CET	443	49965	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.090783119 CET	49965	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.090796947 CET	443	49965	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.091139078 CET	49965	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.091145992 CET	443	49965	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.106583118 CET	443	49964	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.107026100 CET	49964	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.107067108 CET	443	49964	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.107714891 CET	49964	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.107728004 CET	443	49964	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.166583061 CET	443	49962	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.166806936 CET	443	49963	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.166853905 CET	443	49963	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.166923046 CET	49963	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.167037964 CET	49962	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.167078018 CET	443	49962	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.167444944 CET	49962	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.167459965 CET	443	49962	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.167618990 CET	49963	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.167645931 CET	443	49963	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.167670965 CET	49963	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.167685032 CET	443	49963	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.170689106 CET	49967	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.170722961 CET	443	49967	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.170907021 CET	49967	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.171083927 CET	49967	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.171099901 CET	443	49967	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.224509954 CET	443	49965	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.224550962 CET	443	49965	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.224601984 CET	443	49965	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.224751949 CET	49965	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.224929094 CET	49965	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.224930048 CET	49965	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.224942923 CET	443	49965	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.224956036 CET	443	49965	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.227499008 CET	49968	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.227540970 CET	443	49968	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.227644920 CET	49968	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.228151083 CET	49968	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.228173971 CET	443	49968	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.245706081 CET	443	49964	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.245865107 CET	443	49964	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.246208906 CET	49964	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.246315956 CET	49964	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.246357918 CET	443	49964	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.246396065 CET	49964	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.246412992 CET	443	49964	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.248738050 CET	49969	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.248790026 CET	443	49969	13.107.246.45	192.168.2.4
Oct 28, 2024 02:48:12.249034882 CET	49969	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.249034882 CET	49969	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:48:12.249114037 CET	443	49969	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 02:46:50.797156096 CET	53	50526	1.1.1.1	192.168.2.4
Oct 28, 2024 02:46:50.798444986 CET	53	59319	1.1.1.1	192.168.2.4
Oct 28, 2024 02:46:51.923511982 CET	62710	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:46:51.923744917 CET	58163	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:46:52.118127108 CET	53	58163	1.1.1.1	192.168.2.4
Oct 28, 2024 02:46:52.174753904 CET	53	62710	1.1.1.1	192.168.2.4
Oct 28, 2024 02:46:52.179811001 CET	53	53888	1.1.1.1	192.168.2.4
Oct 28, 2024 02:46:54.480573893 CET	64100	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:46:54.481235981 CET	60796	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:46:54.487945080 CET	53	64100	1.1.1.1	192.168.2.4
Oct 28, 2024 02:46:54.488291025 CET	53	60796	1.1.1.1	192.168.2.4
Oct 28, 2024 02:46:57.200781107 CET	56818	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:46:57.204183102 CET	58243	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:46:59.193983078 CET	61669	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:46:59.194191933 CET	57497	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:46:59.201136112 CET	53	61669	1.1.1.1	192.168.2.4
Oct 28, 2024 02:46:59.201740980 CET	53	57497	1.1.1.1	192.168.2.4
Oct 28, 2024 02:47:00.933135986 CET	56239	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:00.933331013 CET	52167	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:00.940399885 CET	53	56239	1.1.1.1	192.168.2.4
Oct 28, 2024 02:47:00.941206932 CET	53	52167	1.1.1.1	192.168.2.4
Oct 28, 2024 02:47:02.352821112 CET	52662	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:02.353110075 CET	58950	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:03.530576944 CET	138	138	192.168.2.4	192.168.2.255
Oct 28, 2024 02:47:06.757950068 CET	65194	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:06.758533955 CET	61499	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:06.763267994 CET	50427	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:06.763616085 CET	51453	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:06.770427942 CET	53	50427	1.1.1.1	192.168.2.4
Oct 28, 2024 02:47:06.771209955 CET	53	51453	1.1.1.1	192.168.2.4
Oct 28, 2024 02:47:08.406347036 CET	61939	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:08.409672976 CET	52346	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:09.199508905 CET	53	59080	1.1.1.1	192.168.2.4
Oct 28, 2024 02:47:09.839454889 CET	53	65362	1.1.1.1	192.168.2.4
Oct 28, 2024 02:47:10.493201971 CET	64787	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:10.493345022 CET	54662	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:47:28.790734053 CET	53	60554	1.1.1.1	192.168.2.4
Oct 28, 2024 02:47:49.799639940 CET	53	64262	1.1.1.1	192.168.2.4
Oct 28, 2024 02:47:52.388684988 CET	53	57142	1.1.1.1	192.168.2.4
Oct 28, 2024 02:48:02.393579960 CET	60492	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:48:02.393848896 CET	56895	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 28, 2024 02:47:06.796339989 CET	192.168.2.4	1.1.1.1	c2a2	(Port unreachable)	Destination Unreachable
Oct 28, 2024 02:47:08.437978983 CET	192.168.2.4	1.1.1.1	c2a2	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 02:46:51.923511982 CET	192.168.2.4	1.1.1.1	0x34ba	Standard query (0)	burnsmcd.alationcloud.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:46:51.923744917 CET	192.168.2.4	1.1.1.1	0x57be	Standard query (0)	burnsmcd.alationcloud.com	65	IN (0x0001)	false
Oct 28, 2024 02:46:54.480573893 CET	192.168.2.4	1.1.1.1	0xb847	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:46:54.481235981 CET	192.168.2.4	1.1.1.1	0x6b86	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 28, 2024 02:46:57.200781107 CET	192.168.2.4	1.1.1.1	0x5dfc	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:46:57.204183102 CET	192.168.2.4	1.1.1.1	0x6cac	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 28, 2024 02:46:59.193983078 CET	192.168.2.4	1.1.1.1	0x6c5b	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:46:59.194191933 CET	192.168.2.4	1.1.1.1	0xb9e0	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 28, 2024 02:47:00.933135986 CET	192.168.2.4	1.1.1.1	0x613	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:00.933331013 CET	192.168.2.4	1.1.1.1	0xa1d1	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 28, 2024 02:47:02.352821112 CET	192.168.2.4	1.1.1.1	0x1324	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:02.353110075 CET	192.168.2.4	1.1.1.1	0x4398	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Oct 28, 2024 02:47:06.757950068 CET	192.168.2.4	1.1.1.1	0xdb71	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.758533955 CET	192.168.2.4	1.1.1.1	0x6e41	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Oct 28, 2024 02:47:06.763267994 CET	192.168.2.4	1.1.1.1	0x214b	Standard query (0)	autologon.microsoftazuread-sso.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.763616085 CET	192.168.2.4	1.1.1.1	0xf48c	Standard query (0)	autologon.microsoftazuread-sso.com	65	IN (0x0001)	false
Oct 28, 2024 02:47:08.406347036 CET	192.168.2.4	1.1.1.1	0xb7fa	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:08.409672976 CET	192.168.2.4	1.1.1.1	0xe86d	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Oct 28, 2024 02:47:10.493201971 CET	192.168.2.4	1.1.1.1	0x76ce	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:10.493345022 CET	192.168.2.4	1.1.1.1	0x6073	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 28, 2024 02:48:02.393579960 CET	192.168.2.4	1.1.1.1	0x2278	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:48:02.393848896 CET	192.168.2.4	1.1.1.1	0xf4a	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 02:46:52.118127108 CET	1.1.1.1	192.168.2.4	0x57be	No error (0)	burnsmcd.alationcloud.com	ingress-enterprise.use1.alationcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:46:52.174753904 CET	1.1.1.1	192.168.2.4	0x34ba	No error (0)	burnsmcd.alationcloud.com	ingress-enterprise.use1.alationcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:46:52.174753904 CET	1.1.1.1	192.168.2.4	0x34ba	No error (0)	ingress-enterprise.use1.alationcloud.com		35.169.104.34	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:46:52.174753904 CET	1.1.1.1	192.168.2.4	0x34ba	No error (0)	ingress-enterprise.use1.alationcloud.com		44.194.236.141	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:46:52.174753904 CET	1.1.1.1	192.168.2.4	0x34ba	No error (0)	ingress-enterprise.use1.alationcloud.com		34.205.224.111	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:46:54.487945080 CET	1.1.1.1	192.168.2.4	0xb847	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:46:54.488291025 CET	1.1.1.1	192.168.2.4	0x6b86	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 28, 2024 02:46:57.209208965 CET	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:46:57.212995052 CET	1.1.1.1	192.168.2.4	0x6cac	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:46:59.201136112 CET	1.1.1.1	192.168.2.4	0x6c5b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:46:59.201136112 CET	1.1.1.1	192.168.2.4	0x6c5b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:46:59.201136112 CET	1.1.1.1	192.168.2.4	0x6c5b	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:46:59.201740980 CET	1.1.1.1	192.168.2.4	0xb9e0	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:46:59.201740980 CET	1.1.1.1	192.168.2.4	0xb9e0	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:00.940399885 CET	1.1.1.1	192.168.2.4	0x613	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:00.940399885 CET	1.1.1.1	192.168.2.4	0x613	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:00.940399885 CET	1.1.1.1	192.168.2.4	0x613	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:00.941206932 CET	1.1.1.1	192.168.2.4	0xa1d1	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:00.941206932 CET	1.1.1.1	192.168.2.4	0xa1d1	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:01.520067930 CET	1.1.1.1	192.168.2.4	0x949b	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:01.520067930 CET	1.1.1.1	192.168.2.4	0x949b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:01.520067930 CET	1.1.1.1	192.168.2.4	0x949b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.19	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:01.520067930 CET	1.1.1.1	192.168.2.4	0x949b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.35	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:01.520067930 CET	1.1.1.1	192.168.2.4	0x949b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:02.360362053 CET	1.1.1.1	192.168.2.4	0x1324	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:02.360882044 CET	1.1.1.1	192.168.2.4	0x4398	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:03.029692888 CET	1.1.1.1	192.168.2.4	0xba9c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:03.029692888 CET	1.1.1.1	192.168.2.4	0xba9c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:04.005225897 CET	1.1.1.1	192.168.2.4	0xe027	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:04.005225897 CET	1.1.1.1	192.168.2.4	0xe027	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:04.076457977 CET	1.1.1.1	192.168.2.4	0x72f0	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:04.076457977 CET	1.1.1.1	192.168.2.4	0x72f0	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.765686989 CET	1.1.1.1	192.168.2.4	0xdb71	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:06.765686989 CET	1.1.1.1	192.168.2.4	0xdb71	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:06.765686989 CET	1.1.1.1	192.168.2.4	0xdb71	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.770427942 CET	1.1.1.1	192.168.2.4	0x214b	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.23	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.770427942 CET	1.1.1.1	192.168.2.4	0x214b	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.2	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.770427942 CET	1.1.1.1	192.168.2.4	0x214b	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.73	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.770427942 CET	1.1.1.1	192.168.2.4	0x214b	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.0	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.770427942 CET	1.1.1.1	192.168.2.4	0x214b	No error (0)	autologon.microsoftazuread-sso.com		40.126.31.73	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.770427942 CET	1.1.1.1	192.168.2.4	0x214b	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.75	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.770427942 CET	1.1.1.1	192.168.2.4	0x214b	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.4	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.770427942 CET	1.1.1.1	192.168.2.4	0x214b	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.64	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:06.796276093 CET	1.1.1.1	192.168.2.4	0x6e41	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:06.796276093 CET	1.1.1.1	192.168.2.4	0x6e41	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:08.413975000 CET	1.1.1.1	192.168.2.4	0xb7fa	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:08.413975000 CET	1.1.1.1	192.168.2.4	0xb7fa	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:08.413975000 CET	1.1.1.1	192.168.2.4	0xb7fa	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:08.437887907 CET	1.1.1.1	192.168.2.4	0xe86d	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:08.437887907 CET	1.1.1.1	192.168.2.4	0xe86d	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:10.500351906 CET	1.1.1.1	192.168.2.4	0x76ce	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:10.501113892 CET	1.1.1.1	192.168.2.4	0x6073	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:24.936728001 CET	1.1.1.1	192.168.2.4	0xa3c3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:24.936728001 CET	1.1.1.1	192.168.2.4	0xa3c3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:47:39.553719044 CET	1.1.1.1	192.168.2.4	0x59d5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:47:39.553719044 CET	1.1.1.1	192.168.2.4	0x59d5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:48:02.401670933 CET	1.1.1.1	192.168.2.4	0xf4a	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:48:02.401714087 CET	1.1.1.1	192.168.2.4	0x2278	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

burnsmcd.alationcloud.com

fs.microsoft.com

https:

aadcdn.msftauth.net

aadcdn.msauth.net

aadcdn.msauthimages.net

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	35.169.104.34	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:46:53 UTC	687	OUT	GET /compose/query/64/;1 HTTP/1.1 Host: burnsmcd.alationcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:46:53 UTC	396	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 28 Oct 2024 01:46:53 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: /compose/query/64/%3B1/ Content-Security-Policy: default-src * 'unsafe-eval' 'unsafe-inline' blob: data:; frame-ancestors 'self' X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-28 01:46:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	35.169.104.34	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:46:54 UTC	690	OUT	GET /compose/query/64/%3B1/ HTTP/1.1 Host: burnsmcd.alationcloud.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:46:54 UTC	549	IN	HTTP/1.1 302 Found Date: Mon, 28 Oct 2024 01:46:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Location: /login/?next=/compose/query/64/%253B1/ Vary: Cookie X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cache-Control: max-age=0, no-cache, must-revalidate, no-store X-Request-Id: 2cfe8c76-23fb-4d10-8cb7-d411b2a2e789 Content-Security-Policy: default-src * 'unsafe-eval' 'unsafe-inline' blob: data:; frame-ancestors 'self' Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	35.169.104.34	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:46:55 UTC	705	OUT	GET /login/?next=/compose/query/64/%253B1/ HTTP/1.1 Host: burnsmcd.alationcloud.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:46:55 UTC	555	IN	HTTP/1.1 302 Found Date: Mon, 28 Oct 2024 01:46:55 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Location: /saml2/login/?next=/compose/query/64/%253B1/ Vary: Cookie X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cache-Control: max-age=0, no-cache, must-revalidate, no-store X-Request-Id: 9cc53a43-9a1e-45d4-8686-a69e2dd3d937 Content-Security-Policy: default-src * 'unsafe-eval' 'unsafe-inline' blob: data:; frame-ancestors 'self' Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	35.169.104.34	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:46:56 UTC	711	OUT	GET /saml2/login/?next=/compose/query/64/%253B1/ HTTP/1.1 Host: burnsmcd.alationcloud.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:46:57 UTC	1705	IN	HTTP/1.1 302 Found Date: Mon, 28 Oct 2024 01:46:56 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Location: https://login.microsoftonline.com/bfbb9a2b-6d99-4e78-b3c7-95005d555c8b/saml2?SAMLRequest=hZLRT4MwEMb%2FFdL3AsOxjWYjmS7GmRnJQB98a0u3NcIVe8VM%2F3qBaZwv8%2FGu33f3uy%2BdI6%2Brhi1bd4CtemsVOu9YV4Csf1iQ1gIzHDUy4LVC5iTLlw8bFvkh44jKOm2AnFmay57GGmekqYi3Xi2ILukRNsn98fH1EJUZbLLPnHjPymI3dUE6Q6dDbNUa0HFwXSuMxnQU0mhWhCM2nrB48kK8VYetgbvBdXCuQRYEldlr8GstrUGzcwYqDcqXpg7EToiER4JOyiShYzWdUXElpzSJwzAu4ziWMxH0x0TEy76BrzWUGvaXrxMnEbK7osho9pgXxFv%2BpHRjANta2VzZdy3V03bzyyq6qVjL0ufVcIWsTFsOrANGwCUGJJ33BRsCsd6tsTV3l3n6TpfxbpAyBU67D5L%2Bv3QenG1KT9XfT5J%2BAQ%3D%3D&RelayState=%2Fcompose%2Fquery%2F64%2F%253B1%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=eakQ1cIf1S4D8YmSsMS89T49QHwtAFbkoAtKpfe1YyWDbFAiKwR20jwWxNoCt%2BXPVtjmz5xakg0jJHAEKePwd1nnZQzHTVu2T9nKMsD5Cvsem%2B9CyE28dwz3H0b63mor%2FcrL7QwBzkIIJAD3apDXSMYR9cY27s647WwiijKLMwiZAHyT5FYEm%2FaDeWYkJ2G55YD6fCNSKlhyX0r1AJbG7tXpnCys8g%2F6mPh9yrxtKiI%2B%2BbVy4hrItUR3v%2BinkDFSEueIK87mT3L16CnfXGb609zIYgjx3jopq2Up3un%2FO4cwCQ0LOnYCv9SyekA67vVHYFv51W [TRUNCATED] Vary: Cookie X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cache-Control: max-age=0, no-cache, must-revalidate, no-store X-Request-Id: 2d58c924-d26f-4b00-a300-85b99626204f Set-Cookie: saml_session=3jkypfw0e97xek30gi94by01zt1csh52; expires=Mon, 11 Nov 2024 01:46:56 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=None; Secure Content-Security-Policy: default-src * 'unsafe-eval' 'unsafe-inline' blob: data:; frame-ancestors 'self' Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:46:56 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 01:46:57 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=212872 Date: Mon, 28 Oct 2024 01:46:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:46:58 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 01:46:58 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=212924 Date: Mon, 28 Oct 2024 01:46:58 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-28 01:46:58 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	152.199.21.175	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:00 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:00 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2160246 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:47:00 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-10-28 01:47:00 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-28 01:47:00 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-10-28 01:47:00 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2024-10-28 01:47:00 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2024-10-28 01:47:00 UTC	16383	IN	Data Raw: 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 Data Ascii: "UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0
2024-10-28 01:47:00 UTC	16383	IN	Data Raw: 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 Data Ascii: ,o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ig
2024-10-28 01:47:00 UTC	16383	IN	Data Raw: 2b 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: +S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function
2024-10-28 01:47:00 UTC	5	IN	Data Raw: 55 6e 73 65 74 Data Ascii: Unset
2024-10-28 01:47:00 UTC	16383	IN	Data Raw: 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 53 2e Data Ascii: ")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|!S.
2024-10-28 01:47:00 UTC	16383	IN	Data Raw: 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 69 73 2e Data Ascii: i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49750	152.199.21.175	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:01 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:02 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2160248 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:47:02 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-10-28 01:47:02 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-28 01:47:02 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-10-28 01:47:02 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2024-10-28 01:47:02 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2024-10-28 01:47:02 UTC	16383	IN	Data Raw: 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 Data Ascii: "UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0
2024-10-28 01:47:02 UTC	16383	IN	Data Raw: 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 Data Ascii: ,o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ig
2024-10-28 01:47:02 UTC	16383	IN	Data Raw: 2b 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: +S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function
2024-10-28 01:47:02 UTC	5	IN	Data Raw: 55 6e 73 65 74 Data Ascii: Unset
2024-10-28 01:47:02 UTC	16383	IN	Data Raw: 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 53 2e Data Ascii: ")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|!S.
2024-10-28 01:47:02 UTC	16383	IN	Data Raw: 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 69 73 2e Data Ascii: i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49758	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:03 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:04 UTC	781	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:03 GMT Content-Type: text/css Content-Length: 20400 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 25 Sep 2024 21:42:27 GMT ETag: 0x8DCDDAAF34D1A25 x-ms-request-id: 67ad5c3d-601e-001f-5d32-267052000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014703Z-r197bdfb6b4bq7nf8mnywhn9e000000005dg000000006yaa x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:04 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2024-10-28 01:47:04 UTC	4797	IN	Data Raw: 8b ca ba c2 a2 2a 8b 88 bd ac 2c 12 31 2f 2a 2b 24 e5 a1 95 75 9e df 51 bb 5f 6a 19 63 dc bc c9 45 89 b5 70 47 5d 70 ca fb 9e 0e 20 56 49 be 20 69 14 01 46 49 a3 08 a2 a9 10 de 51 33 ab ab 42 ad 3a 03 51 82 c9 86 58 21 80 b6 66 35 88 5b 0b 1a d2 44 af 18 0e 06 e3 65 32 71 db a4 25 ce 20 03 a5 0f 01 b4 b6 c9 2f 95 2d 68 58 9b 7c d2 ca db f4 30 61 ec 73 a7 f6 1e b8 a8 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 f9 d0 f9 26 d9 66 bb 7d ce d8 eb 5e a9 2b 2e 5f 31 9e 3c 14 8e Data Ascii: ,1/+$uQ_jcEpG]p VI iFIQ3B:QX!f5[De2q% /-hX\|0as[66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&&f}^+._1<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49757	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:03 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:04 UTC	798	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:03 GMT Content-Type: application/x-javascript Content-Length: 122269 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 02 Oct 2024 20:05:25 GMT ETag: 0x8DCE31D8E25C262 x-ms-request-id: 8c97931b-001e-0054-1056-268c01000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014703Z-17c5cb586f6z6tw6g7cmdv30m800000005g000000000730v x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:04 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e cb af d8 4a ab b3 2e 27 a9 ca 76 12 67 62 a7 ba 77 53 99 1c 59 a2 1d 75 64 c9 2b c9 79 8c e3 fd ec 3f 00 24 25 ca 96 53 55 bd 7b ee 3d f7 dc 79 a4 2c 12 7c 81 20 08 80 20 f8 e1 e7 9d ff ab f4 73 69 ff fb ff 53 1a 8e 7a d7 a3 d2 e0 b4 34 fa 7c 76 7d 5c ba 82 af ff 28 5d 0e 46 67 fd 93 ef af 07 1b c5 ff 8f 1e bc b8 34 f1 7c 56 82 7f c7 76 cc dc 52 18 94 c2 a8 e4 05 4e 18 cd c3 c8 4e 58 5c 9a c1 df c8 b3 fd d2 24 0a 67 a5 e4 81 95 e6 51 f8 27 73 92 b8 e4 7b 71 02 85 c6 cc 0f 9f 4b 65 a8 2e 72 4b 57 76 94 bc 96 ce ae 2a 55 a8 9f 41 6d de d4 0b a0 b4 13 ce 5f e1 f7 43 52 0a c2 c4 73 58 c9 0e 5c aa cd 87 8f 20 66 a5 45 e0 b2 a8 f4 fc e0 39 0f a5 0b cf 89 c2 38 9c 24 a5 88 39 Data Ascii: {w88fn(.J.'vgbwSYud+y?$%SU{=y,\| siSz4\|v}\(]Fg4\|VvRNNX\$gQ's{qKe.rKWv*UAm_CRsX\ fE98$9
2024-10-28 01:47:04 UTC	16384	IN	Data Raw: 24 68 ef a1 48 69 00 4b 69 b0 f5 a5 f6 21 6b b3 cb 4a f1 ed d6 0e 54 22 01 7b 7c 8b b0 36 c4 03 58 73 20 ac a4 4a b5 ad d4 6e ed d4 74 bb ca d0 d3 02 23 db 7c a7 2a 08 1a 89 14 bc b3 b2 96 07 5a 02 70 e0 27 3c bc 28 57 84 d4 5d 5e 06 3c 94 80 66 fb cf f6 6b ac ad 2a d0 20 ee 06 30 de c1 1c 3b 14 03 5e 6c e2 32 4e e4 8d f3 fd 57 ea cf 20 ca 99 40 0b 28 00 e9 a7 cc cf bf 13 ee c2 50 56 0b cd 19 7b 2c 73 e5 15 27 0c 2d 64 b3 39 5e c9 e1 ee 25 56 d1 9e 03 3c 05 00 07 d9 60 58 56 61 e5 1b 26 a7 c3 cc be e1 49 f7 eb f7 a6 4d 47 13 80 81 26 00 a1 f2 83 f4 2d 6e 79 67 33 16 af 95 43 fd 1d 3d 50 40 61 3a b6 a3 c7 2c 1e c3 a1 b7 e6 57 f7 11 bd bd c8 53 11 af 99 ac e7 fe 8e 5e 5f 4a ee 46 7d 96 8d 62 13 fa 31 d3 dd 9c 4b bc c7 0e 7b 48 d5 05 a8 2c 25 d1 15 ba 85 35 Data Ascii: $hHiKi!kJT"{\|6Xs Jnt#\|Zp'<(W]^<fk 0;^l2NW @(PV{,s'-d9^%V<`XVa&IMG&-nyg3C=P@a:,WS^_JF}b1K{H,%5
2024-10-28 01:47:04 UTC	16384	IN	Data Raw: 1c 64 ef d3 0c 3d ad dd f2 d7 de 0d 2c dc 7e cf 3d 81 cf 09 ba a1 13 41 89 a7 53 fa e6 c2 22 48 b1 7b a6 17 12 43 33 0a 6a b1 88 dd 7d 2e 8c ee da 00 eb 9b dc b9 6f 20 21 6c b5 1e d1 f2 31 1d df 45 54 ea 80 4b bd 03 d4 1b c0 52 72 d0 1b b9 3b 38 32 b6 1e 3b 8c ef 61 09 22 bc 51 c5 a6 7e 64 ee d1 23 d0 b1 b7 9d 04 ee b2 3a 1a e4 03 de 46 ab 50 a6 0a 90 a0 ea 0e c3 e4 d6 42 5a b3 5c 50 07 20 98 7b 5a da ce 4a be d2 8c 31 73 ca c7 a0 14 69 7b 61 80 85 06 00 7b 33 69 64 5d 89 c5 2d 7d 4d 3d 25 68 33 fa 08 f4 ff f0 4b f8 98 59 33 d9 be 88 a6 de 05 ac 1a 4e 4e 34 88 13 b4 2e ef 42 ae 8c a6 7e 4f 6c 9c c4 08 a1 7e 23 d2 8a b8 e9 7d f2 66 70 9e 44 ec cf e0 ca 99 4e bf 78 1f 8e 77 0f 0e df 90 79 15 f7 73 75 86 15 a0 a2 1e 3a bd 54 75 6f 4e 55 79 62 13 2d 24 fb 29 Data Ascii: d=,~=AS"H{C3j}.o !l1ETKRr;82;a"Q~d#:FPBZ\P {ZJ1si{a{3id]-}M=%h3KY3NN4.B~Ol~#}fpDNxwysu:TuoNUyb-$)
2024-10-28 01:47:04 UTC	16384	IN	Data Raw: 64 dc 82 41 87 3c ff d4 42 ef 2d 89 e3 f7 80 26 48 13 82 38 19 9a 47 0b 33 a8 38 69 54 06 c5 32 1a cb f9 9a 09 c8 b2 ed c4 ab b6 1e 18 c3 ab c9 17 91 ab 4a 6a 62 c6 ed 43 cd 2a e1 9b cc a6 60 4a e5 c2 25 57 35 f3 94 a8 22 52 8c fa a3 56 7f 2d 46 e4 21 09 3d b5 9b d8 2b c0 0d 38 a8 41 e4 02 e5 0f fd 92 2f 31 a3 b2 1d 2d 07 e1 72 ec fc 10 a4 40 ad bd 46 3f 2f 39 b9 5e 64 1f 5f e3 28 23 46 f1 59 84 9c f6 6b bf f2 0e c7 cb a9 d2 53 36 4e 1c 92 8a a7 e8 f9 4c 01 0c 3c d9 74 05 93 50 4f 51 03 e6 2c ef 8f ae 91 3b 9e 24 6f c2 f1 f0 51 e4 9e d2 dd 3d 0b 03 52 22 cb f3 61 54 96 45 7b 32 e3 0d 8a 4d d8 d6 38 91 be 97 d1 cf 92 a2 91 bf b3 9f 70 33 e1 11 f8 32 8e 73 ad a1 f8 2b 6c f3 0c 6d 2b c4 d7 49 01 0e fd 9e 8c 31 d4 54 7c 17 97 75 e7 68 08 6e ea 8e db 56 32 b9 Data Ascii: dA<B-&H8G38iT2JjbC*`J%W5"RV-F!=+8A/1-r@F?/9^d_(#FYkS6NL<tPOQ,;$oQ=R"aTE{2M8p32s+lm+I1T\|uhnV2
2024-10-28 01:47:04 UTC	16384	IN	Data Raw: 12 cd fe 0c 07 8b 76 ee cd 10 74 06 af 55 36 cf 36 43 c9 70 3c 69 9f 3e 15 f1 f4 36 21 a2 6a 0a d0 8e 6e bf 85 9d 70 41 1b ab e6 06 cb 6b e6 30 72 6c ac bb f6 06 88 8d 47 15 c0 d1 07 5d ae c1 95 4f 34 31 08 0c 54 7d c1 3f b5 43 79 b7 23 f9 57 f9 06 c3 f8 5c 33 f6 16 34 ba 63 a7 44 f8 b8 0c f3 75 60 41 d3 d6 e1 a6 c6 80 e2 f0 aa d7 7b 7c 16 6d 29 23 98 9e 95 eb 3e c3 85 5c cb 21 5c 58 1e 22 51 4d aa a9 e2 d4 3a 0d c1 2d d3 51 97 42 b7 24 5a c4 61 fb 09 b1 0f ae 89 b4 a8 d0 ad e4 80 e4 a7 2c 24 2b ac 1c 06 a6 87 09 16 93 55 03 bc 81 9f 96 7a 6b 45 d6 85 e5 9b 45 ad 4d 52 40 7e a6 cf b3 51 11 e7 37 9c 6f 83 47 a1 ff 4c fb a1 c1 2f 1e 99 90 e8 80 af e8 83 64 b8 d2 9c 3e 82 46 8d 7f ce 2f 23 a7 26 0d 25 12 42 4f 63 6c 6b 86 a5 d9 8e ca aa 2b 18 21 eb 2f 9d 8e Data Ascii: vtU66Cp<i>6!jnpAk0rlG]O41T}?Cy#W\34cDu`A{\|m)#>\!\X"QM:-QB$Za,$+UzkEEMR@~Q7oGL/d>F/#&%BOclk+!/
2024-10-28 01:47:04 UTC	16384	IN	Data Raw: 79 33 16 51 ea 06 3e 34 94 2c 0f ed c0 03 6b 92 d2 e5 61 98 b1 2c 72 e3 08 9a 5c bc 9f ce d2 dc b3 59 2c 82 38 f3 65 96 e4 99 cc 58 ec 7b 76 2c 83 8c e5 5e ee c9 bd 74 63 96 89 8b c8 cd 23 d8 c7 81 cf 81 0b 41 12 26 7e e4 86 71 e8 30 80 51 cb ff 9d 3b 4b 59 14 b8 7e 16 47 5e 2c 6d 29 92 84 45 b9 cc 04 8b e2 1c 26 16 cf ef 66 39 af 76 53 73 d0 94 01 e9 60 a3 03 df c0 a9 12 d8 d1 92 f1 44 e0 0d 04 2c 66 72 3f 68 ee a5 c0 32 01 d2 cc 3d 1e c8 04 73 e8 38 b9 2d b3 c0 15 79 ec e5 a1 b7 1f dc ab 39 7e ea 27 d2 f5 9d 84 bb 8c c5 d2 73 7c 69 db 3c c9 02 27 10 b1 8d 79 dd 0f 39 f9 a9 93 80 dd 04 be 2f f2 24 8a 83 20 c1 84 65 49 14 26 49 92 07 1c 5c 62 2f dd d4 12 2a b5 41 42 b9 e3 0a 50 6c ee 25 b6 9f b8 81 87 e1 04 89 c8 03 9b 65 77 f3 3e ad 75 96 c6 0e 67 91 cb Data Ascii: y3Q>4,ka,r\Y,8eX{v,^tc#A&~q0Q;KY~G^,m)E&f9vSs`D,fr?h2=s8-y9~'s\|i<'y9/$ eI&I\b/*ABPl%ew>ug
2024-10-28 01:47:04 UTC	16384	IN	Data Raw: 16 d6 59 da 3b ed f5 17 f9 94 65 bf c5 a6 df a6 08 d3 fd 03 0b 2d 3d ba b5 db 1f 36 af c4 d3 65 a9 c6 3e ed 2e cb 7a 89 2d 36 03 95 22 54 30 68 ff 44 56 bc d3 e0 a6 42 7b 65 bf 75 c8 d2 df 2e aa 42 1f 2e 50 e2 bd 78 a2 5f ab 2d e9 fa 8e 8a 83 c9 64 72 40 04 1f 8d c6 ad f7 e3 17 b0 1c 28 ca e3 f9 4f 4f 1e f4 11 5b 3d 7b f3 97 9d 6b 4d d6 30 ba fb 79 23 cd 55 fa f4 66 67 9e ea 97 1b bd 16 53 72 d8 33 1d 63 d0 aa d7 fe b0 a9 bf 3a d3 e6 0f 8c 76 d1 97 eb 6a 4c ef 2e 1c 9f 28 bc 69 dd ca f9 59 b9 30 3c 73 cd c1 b0 fe f9 cb f1 76 7c 3e 8f ce 97 e9 47 d1 b6 fa b7 4b 42 db 64 97 7f fb 09 aa d3 29 75 d5 86 56 af 0c 5f 7e de bf 47 47 e5 ef 7d de 04 08 b4 5d b2 f5 cb 7f 34 13 b4 2c b8 59 25 f9 86 f1 37 5a 19 57 92 ac bd 97 b0 94 f9 9d 22 bf 9a 7a f3 69 33 e6 a4 fa Data Ascii: Y;e-=6e>.z-6"T0hDVB{eu.B.Px_-dr@(OO[={kM0y#UfgSr3c:vjL.(iY0<sv\|>GKBd)uV_~GG}]4,Y%7ZW"zi3
2024-10-28 01:47:04 UTC	8379	IN	Data Raw: 2c a8 af f1 0d fc f5 d8 52 bc bd 82 fd 1e 27 73 02 ea 57 ee e1 49 b0 58 26 c6 8f 69 c9 b3 8f b0 52 08 2f d0 6e fc c0 f8 0d 5f 1c 61 34 30 71 17 4d da 45 5e b0 83 2b e3 1f 53 66 6c 63 a3 7d 0b 9b d7 e7 30 72 8d df f9 c3 1f 69 72 1a 50 0c 7c 8c a8 64 fc c4 9f 9e 7d f4 17 ff 4e 5c e3 ef 38 c8 a3 e4 8b f1 4f 36 5a 80 9c 93 bf 07 69 fc 0b 5e f8 25 4c 32 fe 8d e5 df 51 0c d8 73 14 82 4e e0 24 22 05 ab 41 a9 f2 8a 27 ea 5a 18 81 f2 10 0a be 0a 79 88 75 50 a9 e0 79 c4 1e b3 a9 a2 cb 8a 7f 69 f8 f8 18 57 ed 1d a8 39 78 1b 93 21 bc 78 49 68 0a a7 23 24 be b9 11 d2 e9 ce 0e 93 be 5e f8 6e 98 9a d2 8d 88 a6 80 03 7a 82 c2 24 ba 31 62 ca 41 80 0b 07 53 c2 90 54 86 23 9e fd e8 27 2f 97 36 3e 71 e5 93 30 bc 9c 53 7c 32 17 4f 5e 10 87 da 30 1e 7c b6 14 cf 4e 05 0a 73 4c Data Ascii: ,R'sWIX&iR/n_a40qME^+Sflc}0rirP\|d}N\8O6Zi^%L2QsN$"A'ZyuPyiW9x!xIh#$^nz$1bAST#'/6>q0S\|2O^0\|NsL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49759	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:03 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:04 UTC	791	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:03 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: ef99eb7d-501e-002b-4d13-26439a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014703Z-15b8d89586fnsf5zd126eyaetw00000005fg000000009xgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:04 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-28 01:47:04 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49763	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:04 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:05 UTC	791	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:04 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 9d81d4e8-f01e-0053-509a-24dfcf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014704Z-16849878b78j7llf5vkyvvcehs00000005eg00000000a4ku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:05 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-28 01:47:05 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49765	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:05 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:05 UTC	744	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:05 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 987d7f74-001e-0068-737f-279a6b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014705Z-17c5cb586f67hfgj2durhqcxk8000000034000000000cze9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:05 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-28 01:47:05 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49764	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:05 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:05 UTC	792	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:05 GMT Content-Type: application/x-javascript Content-Length: 122269 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 02 Oct 2024 20:05:25 GMT ETag: 0x8DCE31D8E25C262 x-ms-request-id: aa9c0d90-201e-006c-45ae-2528c1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014705Z-r197bdfb6b4hsj5bywyqk9r2xw00000005sg000000005ba8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:05 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e cb af d8 4a ab b3 2e 27 a9 ca 76 12 67 62 a7 ba 77 53 99 1c 59 a2 1d 75 64 c9 2b c9 79 8c e3 fd ec 3f 00 24 25 ca 96 53 55 bd 7b ee 3d f7 dc 79 a4 2c 12 7c 81 20 08 80 20 f8 e1 e7 9d ff ab f4 73 69 ff fb ff 53 1a 8e 7a d7 a3 d2 e0 b4 34 fa 7c 76 7d 5c ba 82 af ff 28 5d 0e 46 67 fd 93 ef af 07 1b c5 ff 8f 1e bc b8 34 f1 7c 56 82 7f c7 76 cc dc 52 18 94 c2 a8 e4 05 4e 18 cd c3 c8 4e 58 5c 9a c1 df c8 b3 fd d2 24 0a 67 a5 e4 81 95 e6 51 f8 27 73 92 b8 e4 7b 71 02 85 c6 cc 0f 9f 4b 65 a8 2e 72 4b 57 76 94 bc 96 ce ae 2a 55 a8 9f 41 6d de d4 0b a0 b4 13 ce 5f e1 f7 43 52 0a c2 c4 73 58 c9 0e 5c aa cd 87 8f 20 66 a5 45 e0 b2 a8 f4 fc e0 39 0f a5 0b cf 89 c2 38 9c 24 a5 88 39 Data Ascii: {w88fn(.J.'vgbwSYud+y?$%SU{=y,\| siSz4\|v}\(]Fg4\|VvRNNX\$gQ's{qKe.rKWv*UAm_CRsX\ fE98$9
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: 00 4b 69 b0 f5 a5 f6 21 6b b3 cb 4a f1 ed d6 0e 54 22 01 7b 7c 8b b0 36 c4 03 58 73 20 ac a4 4a b5 ad d4 6e ed d4 74 bb ca d0 d3 02 23 db 7c a7 2a 08 1a 89 14 bc b3 b2 96 07 5a 02 70 e0 27 3c bc 28 57 84 d4 5d 5e 06 3c 94 80 66 fb cf f6 6b ac ad 2a d0 20 ee 06 30 de c1 1c 3b 14 03 5e 6c e2 32 4e e4 8d f3 fd 57 ea cf 20 ca 99 40 0b 28 00 e9 a7 cc cf bf 13 ee c2 50 56 0b cd 19 7b 2c 73 e5 15 27 0c 2d 64 b3 39 5e c9 e1 ee 25 56 d1 9e 03 3c 05 00 07 d9 60 58 56 61 e5 1b 26 a7 c3 cc be e1 49 f7 eb f7 a6 4d 47 13 80 81 26 00 a1 f2 83 f4 2d 6e 79 67 33 16 af 95 43 fd 1d 3d 50 40 61 3a b6 a3 c7 2c 1e c3 a1 b7 e6 57 f7 11 bd bd c8 53 11 af 99 ac e7 fe 8e 5e 5f 4a ee 46 7d 96 8d 62 13 fa 31 d3 dd 9c 4b bc c7 0e 7b 48 d5 05 a8 2c 25 d1 15 ba 85 35 1e 6d 71 ee 63 56 Data Ascii: Ki!kJT"{\|6Xs Jnt#\|Zp'<(W]^<fk 0;^l2NW @(PV{,s'-d9^%V<`XVa&IMG&-nyg3C=P@a:,WS^_JF}b1K{H,%5mqcV
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: ad dd f2 d7 de 0d 2c dc 7e cf 3d 81 cf 09 ba a1 13 41 89 a7 53 fa e6 c2 22 48 b1 7b a6 17 12 43 33 0a 6a b1 88 dd 7d 2e 8c ee da 00 eb 9b dc b9 6f 20 21 6c b5 1e d1 f2 31 1d df 45 54 ea 80 4b bd 03 d4 1b c0 52 72 d0 1b b9 3b 38 32 b6 1e 3b 8c ef 61 09 22 bc 51 c5 a6 7e 64 ee d1 23 d0 b1 b7 9d 04 ee b2 3a 1a e4 03 de 46 ab 50 a6 0a 90 a0 ea 0e c3 e4 d6 42 5a b3 5c 50 07 20 98 7b 5a da ce 4a be d2 8c 31 73 ca c7 a0 14 69 7b 61 80 85 06 00 7b 33 69 64 5d 89 c5 2d 7d 4d 3d 25 68 33 fa 08 f4 ff f0 4b f8 98 59 33 d9 be 88 a6 de 05 ac 1a 4e 4e 34 88 13 b4 2e ef 42 ae 8c a6 7e 4f 6c 9c c4 08 a1 7e 23 d2 8a b8 e9 7d f2 66 70 9e 44 ec cf e0 ca 99 4e bf 78 1f 8e 77 0f 0e df 90 79 15 f7 73 75 86 15 a0 a2 1e 3a bd 54 75 6f 4e 55 79 62 13 2d 24 fb 29 50 82 45 6b 94 f4 Data Ascii: ,~=AS"H{C3j}.o !l1ETKRr;82;a"Q~d#:FPBZ\P {ZJ1si{a{3id]-}M=%h3KY3NN4.B~Ol~#}fpDNxwysu:TuoNUyb-$)PEk
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: ff d4 42 ef 2d 89 e3 f7 80 26 48 13 82 38 19 9a 47 0b 33 a8 38 69 54 06 c5 32 1a cb f9 9a 09 c8 b2 ed c4 ab b6 1e 18 c3 ab c9 17 91 ab 4a 6a 62 c6 ed 43 cd 2a e1 9b cc a6 60 4a e5 c2 25 57 35 f3 94 a8 22 52 8c fa a3 56 7f 2d 46 e4 21 09 3d b5 9b d8 2b c0 0d 38 a8 41 e4 02 e5 0f fd 92 2f 31 a3 b2 1d 2d 07 e1 72 ec fc 10 a4 40 ad bd 46 3f 2f 39 b9 5e 64 1f 5f e3 28 23 46 f1 59 84 9c f6 6b bf f2 0e c7 cb a9 d2 53 36 4e 1c 92 8a a7 e8 f9 4c 01 0c 3c d9 74 05 93 50 4f 51 03 e6 2c ef 8f ae 91 3b 9e 24 6f c2 f1 f0 51 e4 9e d2 dd 3d 0b 03 52 22 cb f3 61 54 96 45 7b 32 e3 0d 8a 4d d8 d6 38 91 be 97 d1 cf 92 a2 91 bf b3 9f 70 33 e1 11 f8 32 8e 73 ad a1 f8 2b 6c f3 0c 6d 2b c4 d7 49 01 0e fd 9e 8c 31 d4 54 7c 17 97 75 e7 68 08 6e ea 8e db 56 32 b9 eb 46 63 5d dc 0b Data Ascii: B-&H8G38iT2JjbC*`J%W5"RV-F!=+8A/1-r@F?/9^d_(#FYkS6NL<tPOQ,;$oQ=R"aTE{2M8p32s+lm+I1T\|uhnV2Fc]
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: 76 ee cd 10 74 06 af 55 36 cf 36 43 c9 70 3c 69 9f 3e 15 f1 f4 36 21 a2 6a 0a d0 8e 6e bf 85 9d 70 41 1b ab e6 06 cb 6b e6 30 72 6c ac bb f6 06 88 8d 47 15 c0 d1 07 5d ae c1 95 4f 34 31 08 0c 54 7d c1 3f b5 43 79 b7 23 f9 57 f9 06 c3 f8 5c 33 f6 16 34 ba 63 a7 44 f8 b8 0c f3 75 60 41 d3 d6 e1 a6 c6 80 e2 f0 aa d7 7b 7c 16 6d 29 23 98 9e 95 eb 3e c3 85 5c cb 21 5c 58 1e 22 51 4d aa a9 e2 d4 3a 0d c1 2d d3 51 97 42 b7 24 5a c4 61 fb 09 b1 0f ae 89 b4 a8 d0 ad e4 80 e4 a7 2c 24 2b ac 1c 06 a6 87 09 16 93 55 03 bc 81 9f 96 7a 6b 45 d6 85 e5 9b 45 ad 4d 52 40 7e a6 cf b3 51 11 e7 37 9c 6f 83 47 a1 ff 4c fb a1 c1 2f 1e 99 90 e8 80 af e8 83 64 b8 d2 9c 3e 82 46 8d 7f ce 2f 23 a7 26 0d 25 12 42 4f 63 6c 6b 86 a5 d9 8e ca aa 2b 18 21 eb 2f 9d 8e 2c 41 9a 03 69 9c Data Ascii: vtU66Cp<i>6!jnpAk0rlG]O41T}?Cy#W\34cDu`A{\|m)#>\!\X"QM:-QB$Za,$+UzkEEMR@~Q7oGL/d>F/#&%BOclk+!/,Ai
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: 3e 34 94 2c 0f ed c0 03 6b 92 d2 e5 61 98 b1 2c 72 e3 08 9a 5c bc 9f ce d2 dc b3 59 2c 82 38 f3 65 96 e4 99 cc 58 ec 7b 76 2c 83 8c e5 5e ee c9 bd 74 63 96 89 8b c8 cd 23 d8 c7 81 cf 81 0b 41 12 26 7e e4 86 71 e8 30 80 51 cb ff 9d 3b 4b 59 14 b8 7e 16 47 5e 2c 6d 29 92 84 45 b9 cc 04 8b e2 1c 26 16 cf ef 66 39 af 76 53 73 d0 94 01 e9 60 a3 03 df c0 a9 12 d8 d1 92 f1 44 e0 0d 04 2c 66 72 3f 68 ee a5 c0 32 01 d2 cc 3d 1e c8 04 73 e8 38 b9 2d b3 c0 15 79 ec e5 a1 b7 1f dc ab 39 7e ea 27 d2 f5 9d 84 bb 8c c5 d2 73 7c 69 db 3c c9 02 27 10 b1 8d 79 dd 0f 39 f9 a9 93 80 dd 04 be 2f f2 24 8a 83 20 c1 84 65 49 14 26 49 92 07 1c 5c 62 2f dd d4 12 2a b5 41 42 b9 e3 0a 50 6c ee 25 b6 9f b8 81 87 e1 04 89 c8 03 9b 65 77 f3 3e ad 75 96 c6 0e 67 91 cb 03 57 fd eb 7b 8c Data Ascii: >4,ka,r\Y,8eX{v,^tc#A&~q0Q;KY~G^,m)E&f9vSs`D,fr?h2=s8-y9~'s\|i<'y9/$ eI&I\b/*ABPl%ew>ugW{
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: f5 17 f9 94 65 bf c5 a6 df a6 08 d3 fd 03 0b 2d 3d ba b5 db 1f 36 af c4 d3 65 a9 c6 3e ed 2e cb 7a 89 2d 36 03 95 22 54 30 68 ff 44 56 bc d3 e0 a6 42 7b 65 bf 75 c8 d2 df 2e aa 42 1f 2e 50 e2 bd 78 a2 5f ab 2d e9 fa 8e 8a 83 c9 64 72 40 04 1f 8d c6 ad f7 e3 17 b0 1c 28 ca e3 f9 4f 4f 1e f4 11 5b 3d 7b f3 97 9d 6b 4d d6 30 ba fb 79 23 cd 55 fa f4 66 67 9e ea 97 1b bd 16 53 72 d8 33 1d 63 d0 aa d7 fe b0 a9 bf 3a d3 e6 0f 8c 76 d1 97 eb 6a 4c ef 2e 1c 9f 28 bc 69 dd ca f9 59 b9 30 3c 73 cd c1 b0 fe f9 cb f1 76 7c 3e 8f ce 97 e9 47 d1 b6 fa b7 4b 42 db 64 97 7f fb 09 aa d3 29 75 d5 86 56 af 0c 5f 7e de bf 47 47 e5 ef 7d de 04 08 b4 5d b2 f5 cb 7f 34 13 b4 2c b8 59 25 f9 86 f1 37 5a 19 57 92 ac bd 97 b0 94 f9 9d 22 bf 9a 7a f3 69 33 e6 a4 fa fb fc 71 29 e4 f3 Data Ascii: e-=6e>.z-6"T0hDVB{eu.B.Px_-dr@(OO[={kM0y#UfgSr3c:vjL.(iY0<sv\|>GKBd)uV_~GG}]4,Y%7ZW"zi3q)
2024-10-28 01:47:05 UTC	8373	IN	Data Raw: f5 d8 52 bc bd 82 fd 1e 27 73 02 ea 57 ee e1 49 b0 58 26 c6 8f 69 c9 b3 8f b0 52 08 2f d0 6e fc c0 f8 0d 5f 1c 61 34 30 71 17 4d da 45 5e b0 83 2b e3 1f 53 66 6c 63 a3 7d 0b 9b d7 e7 30 72 8d df f9 c3 1f 69 72 1a 50 0c 7c 8c a8 64 fc c4 9f 9e 7d f4 17 ff 4e 5c e3 ef 38 c8 a3 e4 8b f1 4f 36 5a 80 9c 93 bf 07 69 fc 0b 5e f8 25 4c 32 fe 8d e5 df 51 0c d8 73 14 82 4e e0 24 22 05 ab 41 a9 f2 8a 27 ea 5a 18 81 f2 10 0a be 0a 79 88 75 50 a9 e0 79 c4 1e b3 a9 a2 cb 8a 7f 69 f8 f8 18 57 ed 1d a8 39 78 1b 93 21 bc 78 49 68 0a a7 23 24 be b9 11 d2 e9 ce 0e 93 be 5e f8 6e 98 9a d2 8d 88 a6 80 03 7a 82 c2 24 ba 31 62 ca 41 80 0b 07 53 c2 90 54 86 23 9e fd e8 27 2f 97 36 3e 71 e5 93 30 bc 9c 53 7c 32 17 4f 5e 10 87 da 30 1e 7c b6 14 cf 4e 05 0a 73 4c 35 40 bd 69 b1 e1 Data Ascii: R'sWIX&iR/n_a40qME^+Sflc}0rirP\|d}N\8O6Zi^%L2QsN$"A'ZyuPyiW9x!xIh#$^nz$1bAST#'/6>q0S\|2O^0\|NsL5@i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49766	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:05 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:05 UTC	813	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:05 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 5669326d-c01e-0005-4cb6-252e20000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014705Z-16849878b78x6gn56mgecg60qc000000064000000000ekzp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:05 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: c6 f1 60 48 76 39 a2 ca 7d 0a c4 6c 46 7b 28 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 Data Ascii: `Hv9}lF{(rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUF
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: d6 d6 bf a7 c9 82 82 ed 58 a9 a7 1e 3e d1 2c 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 Data Ascii: X>,)i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: a4 ca a6 93 a3 67 05 69 b4 c6 7e c4 d9 e3 39 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 Data Ascii: gi~9Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: 41 1f ce 63 f8 7c 38 cb 6e 62 8c 3e 56 eb 18 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 Data Ascii: Ac\|8nb>VP9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: 6f 8f 8c 3d a0 b1 ba b9 56 ed db 8d 94 af 1a 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 Data Ascii: o=Vtr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$s
2024-10-28 01:47:05 UTC	16384	IN	Data Raw: 28 6a 74 56 53 66 c5 fe cf 72 5c d8 9f 15 29 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc Data Ascii: (jtVSfr\)cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3
2024-10-28 01:47:05 UTC	2490	IN	Data Raw: 76 68 98 bc a0 3f 40 4a 03 1c b3 42 1d 27 14 de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f Data Ascii: vh?@JB',0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49767	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:06 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:06 UTC	817	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:06 GMT Content-Type: application/x-javascript Content-Length: 5529 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD531731891C x-ms-request-id: 2e063ffe-901e-005e-0242-285f09000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014706Z-17c5cb586f6zrq5bnguxgu7frc000000056g000000000xhy x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:06 UTC	5529	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 5b 7d 77 9b 46 d6 ff 7f 3f 05 62 f7 28 b0 19 63 bb 69 9b 16 97 fa 38 7a 49 d4 da b1 6b c9 ed 66 93 1c 1d 24 46 12 31 02 ca 20 db aa a5 ef fe fc ee 0c 08 24 21 d9 e9 b3 3d a9 31 33 77 ee dc b9 73 df 2f 3e fc 77 ed 1f da bf b5 83 e7 ff a7 75 7b 67 d7 3d ed b2 ad f5 de 75 ae 9b da 15 de 3e 68 ef 2f 7b 9d 46 eb f9 78 68 53 fa bf 37 f1 85 36 f2 03 ae e1 39 70 05 f7 b4 28 d4 a2 44 f3 c3 61 94 c4 51 e2 a6 5c 68 53 fc 4c 7c 37 d0 46 49 34 d5 d2 09 d7 e2 24 fa c2 87 a9 d0 02 5f a4 58 34 e0 41 74 af 19 40 97 78 da 95 9b a4 73 ad 73 65 5a c0 cf 81 cd 1f fb 21 56 0f a3 78 8e df 27 a9 16 46 a9 3f e4 9a 1b 7a 12 5b 80 97 50 70 6d 16 7a 3c d1 ee 27 fe 70 a2 5d f8 c3 24 12 d1 28 d5 12 3e e4 fe 1d 36 11 33 8c af 6f c1 34 37 e1 9a e0 a9 36 Data Ascii: [}wF?b(ci8zIkf$F1 $!=13ws/>wu{g=u>h/{FxhS769p(DaQ\hSL\|7FI4$_X4At@xsseZ!Vx'F?z[Ppmz<'p]$(>63o476

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49768	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:06 UTC	668	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:06 UTC	755	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:06 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 4487d48f-f01e-006f-7df3-27c9a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014706Z-15b8d89586fnsf5zd126eyaetw00000005mg000000003ck1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:06 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49769	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:06 UTC	662	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:06 UTC	755	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:06 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: b16edf77-501e-0017-2b25-2655f0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014706Z-16849878b78qf2gleqhwczd21s00000004p000000000153n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:06 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49771	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:07 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:07 UTC	738	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:07 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: cc2ec704-501e-0059-40b2-2544d5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014707Z-r197bdfb6b4gx6v9pg74w9f47s000000068g000000001693 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:07 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-28 01:47:07 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49772	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:07 UTC	433	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:07 UTC	798	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:07 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 4498951e-801e-0004-52f6-2671fc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014707Z-r197bdfb6b46kmj4701qkq602400000003d0000000007fzc x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:07 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-28 01:47:07 UTC	16384	IN	Data Raw: 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 Data Ascii: rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-q
2024-10-28 01:47:07 UTC	16384	IN	Data Raw: 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a Data Ascii: )i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z
2024-10-28 01:47:07 UTC	16384	IN	Data Raw: 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 Data Ascii: Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-
2024-10-28 01:47:07 UTC	16384	IN	Data Raw: 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e Data Ascii: P9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^
2024-10-28 01:47:07 UTC	16384	IN	Data Raw: 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 Data Ascii: tr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurP
2024-10-28 01:47:07 UTC	16384	IN	Data Raw: 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc 62 0c f8 da ff d2 10 b6 5d 8b f8 dd ff 09 a0 Data Ascii: cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3 b]
2024-10-28 01:47:07 UTC	2475	IN	Data Raw: de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f e7 bf 94 24 d3 33 bf ed be 46 3e eb 7b 14 3a Data Ascii: ,0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC$3F>{:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49776	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:07 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:07 UTC	796	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:07 GMT Content-Type: application/x-javascript Content-Length: 5529 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD531731891C x-ms-request-id: f9ba9bbb-801e-0017-4f1b-276a5d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014707Z-16849878b78zqkvcwgr6h55x9n00000003s000000000hsxr x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:07 UTC	5529	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 5b 7d 77 9b 46 d6 ff 7f 3f 05 62 f7 28 b0 19 63 bb 69 9b 16 97 fa 38 7a 49 d4 da b1 6b c9 ed 66 93 1c 1d 24 46 12 31 02 ca 20 db aa a5 ef fe fc ee 0c 08 24 21 d9 e9 b3 3d a9 31 33 77 ee dc b9 73 df 2f 3e fc 77 ed 1f da bf b5 83 e7 ff a7 75 7b 67 d7 3d ed b2 ad f5 de 75 ae 9b da 15 de 3e 68 ef 2f 7b 9d 46 eb f9 78 68 53 fa bf 37 f1 85 36 f2 03 ae e1 39 70 05 f7 b4 28 d4 a2 44 f3 c3 61 94 c4 51 e2 a6 5c 68 53 fc 4c 7c 37 d0 46 49 34 d5 d2 09 d7 e2 24 fa c2 87 a9 d0 02 5f a4 58 34 e0 41 74 af 19 40 97 78 da 95 9b a4 73 ad 73 65 5a c0 cf 81 cd 1f fb 21 56 0f a3 78 8e df 27 a9 16 46 a9 3f e4 9a 1b 7a 12 5b 80 97 50 70 6d 16 7a 3c d1 ee 27 fe 70 a2 5d f8 c3 24 12 d1 28 d5 12 3e e4 fe 1d 36 11 33 8c af 6f c1 34 37 e1 9a e0 a9 36 Data Ascii: [}wF?b(ci8zIkf$F1 $!=13ws/>wu{g=u>h/{FxhS769p(DaQ\hSL\|7FI4$_X4At@xsseZ!Vx'F?z[Ppmz<'p]$(>63o476

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49777	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:07 UTC	423	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:07 UTC	734	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:07 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 25572f67-f01e-0067-4c65-27a415000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014707Z-16849878b78wc6ln1zsrz6q9w80000000430000000005ef8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:07 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49775	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:07 UTC	417	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:07 UTC	740	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:07 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: d5164712-301e-0002-3c9b-267dee000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014707Z-17c5cb586f66g7mvbfuqdb2m3n00000004hg0000000012mz x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:07 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49774	152.199.21.175	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:08 UTC	699	OUT	GET /dbd5a2dd-ebuwtroprxsqonwy2n8z4s0iw7gb0u-ycuo77htkuf4/logintenantbranding/0/bannerlogo?ts=637805376984720579 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:08 UTC	650	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 52968 Cache-Control: public, max-age=86400 Content-MD5: HcjXKPzVnjRW8bzFmZh4Fg== Content-Type: image/* Date: Mon, 28 Oct 2024 01:47:08 GMT Etag: 0x8D9F09C730B0F64 Last-Modified: Tue, 15 Feb 2022 16:01:38 GMT Server: ECAcc (lhc/792A) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 78408514-501e-0063-465f-28de19000000 x-ms-version: 2009-09-19 Content-Length: 4965 Connection: close
2024-10-28 01:47:08 UTC	4965	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 7d 01 7d 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF}}@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49778	152.199.21.175	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:09 UTC	454	OUT	GET /dbd5a2dd-ebuwtroprxsqonwy2n8z4s0iw7gb0u-ycuo77htkuf4/logintenantbranding/0/bannerlogo?ts=637805376984720579 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:09 UTC	650	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 52969 Cache-Control: public, max-age=86400 Content-MD5: HcjXKPzVnjRW8bzFmZh4Fg== Content-Type: image/* Date: Mon, 28 Oct 2024 01:47:09 GMT Etag: 0x8D9F09C730B0F64 Last-Modified: Tue, 15 Feb 2022 16:01:38 GMT Server: ECAcc (lhc/792A) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 78408514-501e-0063-465f-28de19000000 x-ms-version: 2009-09-19 Content-Length: 4965 Connection: close
2024-10-28 01:47:09 UTC	4965	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 7d 01 7d 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF}}@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49781	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:09 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:09 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:09 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 57041448-801e-0007-34a0-26af35000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014709Z-16849878b78qg9mlz11wgn0wcc00000003wg00000000g9xg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:09 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49780	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:09 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:10 UTC	812	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:09 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 262bb213-d01e-0019-661b-277c40000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014709Z-16849878b78km6fmmkbenhx76n00000003rg000000008ft8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:10 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-28 01:47:10 UTC	16384	IN	Data Raw: 19 bb cd 17 f0 ef de f3 f6 f9 b2 b5 d7 7c 4e 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c Data Ascii: \|N6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x
2024-10-28 01:47:10 UTC	3212	IN	Data Raw: 38 5d 1d 96 55 52 b0 ee 65 51 a5 80 82 a6 5f a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 Data Ascii: 8]UReQ_-av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49783	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:10 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:10 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:10 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 57041448-801e-0007-34a0-26af35000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014710Z-16849878b786lft2mu9uftf3y400000005k000000000gzd7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:10 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49784	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:10 UTC	439	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:47:11 UTC	812	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:10 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 262bb213-d01e-0019-661b-277c40000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T014710Z-16849878b78fssff8btnns3b1400000004p0000000008wnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:11 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-28 01:47:11 UTC	16384	IN	Data Raw: 19 bb cd 17 f0 ef de f3 f6 f9 b2 b5 d7 7c 4e 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c Data Ascii: \|N6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x
2024-10-28 01:47:11 UTC	3212	IN	Data Raw: 38 5d 1d 96 55 52 b0 ee 65 51 a5 80 82 a6 5f a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 Data Ascii: 8]UReQ_-av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:40 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:40 UTC	561	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:40 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 27 Oct 2024 10:35:44 GMT ETag: "0x8DCF6731CF80310" x-ms-request-id: 89d6c6b8-201e-0033-2798-28b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014740Z-16849878b782d4lwcu6h6gmxnw00000003yg00000000kwm7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:40 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-28 01:47:40 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-28 01:47:40 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-28 01:47:40 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-28 01:47:40 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-28 01:47:40 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-28 01:47:40 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-28 01:47:40 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-28 01:47:40 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-28 01:47:40 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:41 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:41 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:41 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014741Z-15b8d89586ff5l62aha9080wv000000005m0000000008y9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:41 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:41 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:41 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:41 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014741Z-16849878b78tg5n42kspfr0x4800000004dg00000000656v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:41 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:41 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:41 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014741Z-16849878b78g2m84h2v9sta290000000034g00000000tz0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:41 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:41 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:41 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:41 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014741Z-16849878b78smng4k6nq15r6s400000005u000000000he7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:41 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:41 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:41 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014741Z-16849878b78j5kdg3dndgqw0vg0000000650000000002bma x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:41 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:42 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:42 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014742Z-16849878b78bjkl8dpep89pbgg000000034g0000000031vn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:42 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:42 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014742Z-15b8d89586f8nxpt6ys645x5v000000005g000000000994x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:42 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:42 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014742Z-16849878b78xblwksrnkakc08w00000003k000000000g9at x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:42 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:42 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014742Z-16849878b78x6gn56mgecg60qc000000067g000000004w6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:42 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:42 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014742Z-16849878b78fkwcjkpn19c5dsn00000003c000000000aqa4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:42 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:43 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:43 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014743Z-16849878b78fssff8btnns3b1400000004qg000000004ka8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:43 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:43 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:43 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014743Z-16849878b786jv8w2kpaf5zkqs000000038g000000008tw0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:43 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:43 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:43 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014743Z-16849878b786jv8w2kpaf5zkqs00000003a0000000003yye x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:43 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:43 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 226d2935-b01e-001e-729c-270214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014743Z-r197bdfb6b4hsj5bywyqk9r2xw00000005u00000000026my x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:43 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014743Z-16849878b78g2m84h2v9sta290000000037g00000000fmny x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:44 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:44 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c47ae6f3-801e-007b-6937-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014744Z-17c5cb586f6hhlf5mrwgq3erx800000005ag00000000d4tp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:44 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:44 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: d7829477-101e-008d-1890-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014744Z-17c5cb586f626sn8grcgm1gf8000000002sg00000000b7np x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:44 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 41f1645c-801e-00ac-16fa-27fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014744Z-17c5cb586f6w4mfs5xcmnrny6n00000005tg00000000d239 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:44 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:44 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: fc173041-601e-0097-79ad-24f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014744Z-15b8d89586f5s5nz3ffrgxn5ac00000004zg000000009235 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:44 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:44 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:44 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f981d888-e01e-0099-4d18-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014744Z-17c5cb586f65j4snyp1hqk5z2s00000005mg00000000fuxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:44 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:45 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 47f8d5d2-401e-005b-1e67-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014745Z-16849878b78tg5n42kspfr0x48000000047g00000000v79m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:45 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8d7929b6-101e-0017-6edc-2647c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014745Z-r197bdfb6b4wmcgqdschtyp7yg000000045000000000e6v3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:45 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:45 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014745Z-16849878b786fl7gm2qg4r5y7000000004kg00000000hb6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:45 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:45 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014745Z-16849878b785dznd7xpawq9gcn00000005n000000000t3nd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:45 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:45 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6b700fd2-301e-005d-5b5a-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014745Z-r197bdfb6b4b4pw6nr8czsrctg0000000510000000004cce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:45 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:46 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:46 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: afbd30f1-101e-007a-739c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014746Z-r197bdfb6b4skzzvqpzzd3xetg00000003m000000000hu83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:46 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:46 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:46 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c9290bd0-101e-0034-2228-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014746Z-15b8d89586f8nxpt6ys645x5v000000005mg000000003cub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:46 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:46 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014746Z-16849878b785dznd7xpawq9gcn00000005ug000000002u15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:46 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014746Z-16849878b7898p5f6vryaqvp580000000590000000001uub x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:46 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:46 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: d73e8916-101e-008d-6973-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014746Z-17c5cb586f66g7mvbfuqdb2m3n00000004e0000000008fsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:46 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:47 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:47 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 06960f57-101e-000b-0c20-265e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014747Z-r197bdfb6b4grkz4xgvkar0zcs00000003w000000000amwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:47 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:47 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 960fe732-901e-0016-4ad7-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014747Z-r197bdfb6b4c8q4qvwwy2byzsw00000004fg00000000cyvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:47 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:47 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: afaa9bab-501e-0078-092c-2806cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014747Z-r197bdfb6b48pcqqxhenwd2uz8000000053g000000007baw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:47 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:47 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:47 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014747Z-16849878b78q9m8bqvwuva4svc00000002w000000000cu5y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:47 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:47 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:47 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014747Z-16849878b786jv8w2kpaf5zkqs0000000390000000007nhw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:47 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:47 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:48 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014748Z-15b8d89586fxdh48qknu9dqk2g00000008900000000091rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:48 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:47 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7ae13fc9-101e-005a-3933-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014748Z-17c5cb586f6g6g2sbe6edp75y400000006d0000000007ncq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:48 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:48 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014748Z-16849878b787bfsh7zgp804my40000000360000000007cht x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:48 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:48 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:48 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 0a130610-701e-001e-4a1f-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014748Z-r197bdfb6b47gqdjqh2kwsuz8c00000004u0000000005kyb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:48 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:48 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:48 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014748Z-16849878b78z2wx67pvzz63kdg00000002y000000000fyuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:48 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:48 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014748Z-16849878b7867ttgfbpnfxt44s000000044000000000qfxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:48 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:49 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:49 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014749Z-16849878b78q9m8bqvwuva4svc00000002v000000000g24p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:49 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:49 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:49 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014749Z-16849878b78qg9mlz11wgn0wcc00000003u000000000tcu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:49 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:49 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:49 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014749Z-16849878b78j5kdg3dndgqw0vg00000005y000000000s09v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:49 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:49 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:49 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 809859d7-601e-00ab-6828-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014749Z-17c5cb586f6fqqst87nqkbsx1c00000002r0000000008w24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:49 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:49 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f963c678-b01e-001e-6d3f-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014749Z-15b8d89586fwzdd8urmg0p1ebs0000000en000000000c2f0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:49 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:49 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:49 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 6be8f11f-201e-003c-5028-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014749Z-r197bdfb6b4jlq9hb8xf0re6t400000004g0000000000w47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:50 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:49 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 336bf192-401e-00ac-1a67-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014749Z-15b8d89586ffsjj9qb0gmb1stn00000008eg00000000b4br x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:50 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:50 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014750Z-15b8d89586f42m673h1quuee4s00000008f000000000496s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:50 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 6c6fa777-201e-003c-1958-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014750Z-r197bdfb6b4mcssrvu34xzqc5400000004eg000000005a9n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:50 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 22dc00c4-601e-003d-7597-286f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014750Z-r197bdfb6b47gqdjqh2kwsuz8c00000004tg0000000066qr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:50 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 989513d0-f01e-0096-5813-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014750Z-17c5cb586f6zrq5bnguxgu7frc000000053g000000006xya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:50 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 8e6df999-101e-007a-77ef-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014750Z-15b8d89586fcvr6p5956n5d0rc0000000a70000000008fw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:50 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:51 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 68dc6fa0-b01e-0001-0ce9-2746e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014751Z-r197bdfb6b4gx6v9pg74w9f47s0000000670000000004pza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:51 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:50 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:51 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014751Z-16849878b785jrf8dn0d2rczaw00000005f000000000gvgv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:51 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:51 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:51 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 384d3f9c-b01e-003d-2424-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014751Z-17c5cb586f6w4mfs5xcmnrny6n00000005z0000000003cak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:51 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:51 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:51 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014751Z-16849878b78fhxrnedubv5byks00000002kg00000000pvfp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:51 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:51 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:51 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014751Z-16849878b78qg9mlz11wgn0wcc00000003wg00000000gcc5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:51 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:51 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:51 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014751Z-16849878b78km6fmmkbenhx76n00000003q000000000czaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:52 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:51 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: fd10a765-001e-002b-6c44-2899f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014751Z-15b8d89586frzkk2umu6w8qnt80000000mx0000000003sww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:52 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:52 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014752Z-15b8d89586fnsf5zd126eyaetw00000005kg000000004z03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:52 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:52 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4814b401-401e-005b-1e73-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014752Z-17c5cb586f6fqqst87nqkbsx1c00000002t00000000069z9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:52 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:52 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:52 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 055e892c-801e-0035-14c8-27752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014752Z-r197bdfb6b4bs5qf58wn14wgm000000003ag000000006gz2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:52 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:52 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:52 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 57ce5cde-c01e-000b-111a-28e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014752Z-15b8d89586ff5l62aha9080wv000000005pg000000003rt8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:52 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:52 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:52 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ad4459d7-101e-007a-6a4c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014752Z-16849878b78smng4k6nq15r6s400000005zg00000000030z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:52 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:53 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 1e165ab9-d01e-007a-4b95-27f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014753Z-r197bdfb6b4c8q4qvwwy2byzsw00000004hg000000008zvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:53 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:53 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 63249b2a-c01e-0046-2e2c-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014753Z-17c5cb586f626sn8grcgm1gf8000000002xg000000001sfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:53 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:53 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:53 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014753Z-r197bdfb6b4gx6v9pg74w9f47s000000061g00000000fhtp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:53 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:53 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: cfcfc7b9-001e-0065-0f5b-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014753Z-17c5cb586f6z6tw6g7cmdv30m800000005n000000000021u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:53 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:53 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014753Z-15b8d89586fcvr6p5956n5d0rc0000000a5g00000000aheq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:53 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:54 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 22a2f8fa-b01e-001e-31af-270214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014754Z-17c5cb586f6lxnvg801rcb3n8n000000040000000000dw06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:54 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014754Z-16849878b78hh85qc40uyr8sc800000004p0000000009ad1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:54 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:54 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014754Z-16849878b78x6gn56mgecg60qc0000000670000000005zr6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:54 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:54 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: fd0e08e6-201e-0085-5f27-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014754Z-17c5cb586f62blg5ss55p9d6fn00000004vg0000000084nm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:54 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:54 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: e853782e-901e-005b-3257-272005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014754Z-r197bdfb6b47gqdjqh2kwsuz8c00000004ng00000000hf9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:54 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:54 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:55 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: c32be80d-501e-0016-5c05-27181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014755Z-17c5cb586f6vcw6vtg5eymp4u800000002eg000000008cgm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:55 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:55 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:55 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014755Z-16849878b78zqkvcwgr6h55x9n00000003v0000000007tuc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:55 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:55 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:55 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014755Z-16849878b78p49s6zkwt11bbkn00000003y000000000mu55 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:55 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:55 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:55 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 6768b437-a01e-00ab-174d-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014755Z-16849878b78wc6ln1zsrz6q9w8000000040000000000fncx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:55 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:55 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:55 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c317859a-501e-00a3-19db-27c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014755Z-r197bdfb6b46krmwag4tzr9x7c000000040g00000000f8d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:55 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:55 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:55 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 20ac8722-c01e-00ad-30e6-27a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014755Z-17c5cb586f6lxnvg801rcb3n8n00000004400000000056uq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:55 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:56 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:56 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014756Z-16849878b7898p5f6vryaqvp58000000053g00000000nm5g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:56 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:56 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:56 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 522c145c-c01e-0066-0c1f-28a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014756Z-17c5cb586f62blg5ss55p9d6fn00000004s000000000g3p9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:56 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:56 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:56 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014756Z-16849878b78wv88bk51myq5vxc00000004qg000000004un5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:56 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:56 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:56 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014756Z-16849878b78smng4k6nq15r6s400000005y000000000515b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:56 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:56 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:56 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014756Z-16849878b786lft2mu9uftf3y400000005ng000000008qcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:56 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:57 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:57 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014757Z-16849878b78zqkvcwgr6h55x9n00000003pg00000000ss6g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:57 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:57 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:57 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 6795109f-a01e-00ab-085e-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014757Z-r197bdfb6b4c8q4qvwwy2byzsw00000004m0000000005bn5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:57 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:57 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:57 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014757Z-16849878b78xblwksrnkakc08w00000003kg00000000ecdv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:57 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:57 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:57 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014757Z-16849878b787wpl5wqkt5731b40000000550000000007wzf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:57 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:57 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:57 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 82f7a233-a01e-0002-6b65-275074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014757Z-17c5cb586f626sn8grcgm1gf8000000002v0000000006qtf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:57 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:58 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:58 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4e087ea8-e01e-0099-0e5a-28da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014758Z-15b8d89586fnsf5zd126eyaetw00000005ng0000000018wq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:58 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:58 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:58 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014758Z-15b8d89586fdmfsg1u7xrpfws000000008q00000000023zg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:58 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:58 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:58 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014758Z-16849878b78g2m84h2v9sta290000000038000000000ddku x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:58 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:58 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:58 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 2dc052aa-901e-0067-6a61-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014758Z-17c5cb586f6wmhkn5q6fu8c5ss00000003s0000000004v4y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:58 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:58 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:58 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c05ef2b3-701e-005c-2d6a-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014758Z-17c5cb586f672xmrz843mf85fn000000035g000000006e82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:58 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:58 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:58 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014758Z-16849878b78p8hrf1se7fucxk8000000059g000000004twt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:59 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:58 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:59 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014759Z-16849878b78fhxrnedubv5byks00000002m000000000q3br x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:47:59 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:58 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:59 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014759Z-16849878b78qwx7pmw9x5fub1c00000002d000000000mrp3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:59 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:59 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:59 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014759Z-16849878b786fl7gm2qg4r5y7000000004h000000000ppv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:59 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:59 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:59 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014759Z-16849878b78qf2gleqhwczd21s00000004h000000000dvf7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:59 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:59 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:59 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 18f8d736-c01e-00a2-252b-272327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014759Z-r197bdfb6b46kmj4701qkq602400000003bg000000009vaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:59 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:59 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:59 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014759Z-16849878b78km6fmmkbenhx76n00000003ng00000000kr8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:59 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:59 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:47:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:59 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ee736da1-b01e-001e-7be0-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014759Z-r197bdfb6b48pcqqxhenwd2uz8000000053g000000007bu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:47:59 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:47:59 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:47:59 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014759Z-16849878b78g2m84h2v9sta29000000003c00000000011rq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:00 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:00 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:00 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 92eac08a-601e-0001-29b2-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014800Z-16849878b78xblwksrnkakc08w00000003g000000000sand x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:00 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:00 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:00 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a7868e79-001e-0049-77f2-245bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014800Z-r197bdfb6b4wmcgqdschtyp7yg000000043g00000000g1n1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:00 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:00 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:00 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: b03ac640-101e-007a-1bc8-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014800Z-17c5cb586f6fqqst87nqkbsx1c00000002q000000000b91w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:00 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:00 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:00 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 141f8a5a-601e-000d-3b74-272618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014800Z-16849878b78km6fmmkbenhx76n00000003sg000000006a2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:48:00 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:00 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:00 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: ff0e8b8f-401e-008c-1c9c-2786c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014800Z-17c5cb586f626sn8grcgm1gf8000000002vg000000005e3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:00 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:01 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:01 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7b68ac53-d01e-0082-7e67-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014801Z-16849878b78fkwcjkpn19c5dsn00000003a000000000m20p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:48:01 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:01 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:01 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014801Z-16849878b78xblwksrnkakc08w00000003gg00000000pubg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:01 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:01 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:01 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014801Z-16849878b78tg5n42kspfr0x4800000004a000000000kf65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:01 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:01 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:01 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: b03cb643-601e-0050-56bd-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014801Z-17c5cb586f64v7xs992vpxwchg000000048000000000dg18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:48:01 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:01 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:01 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 6c5e14af-601e-0002-6c01-27a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014801Z-17c5cb586f6b6kj91vqtm6kxaw00000002xg00000000dasz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:48:01 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:02 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:02 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:02 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 5ece5f0b-101e-0028-1a52-268f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014802Z-r197bdfb6b4jlq9hb8xf0re6t4000000049000000000eb27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:02 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:02 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:02 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: a3881376-a01e-000d-19f4-27d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014802Z-17c5cb586f6r59nt869u8w8xt8000000036000000000h2z5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:48:02 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:02 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:02 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ccbf99dc-401e-0035-1c33-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014802Z-17c5cb586f66g7mvbfuqdb2m3n00000004c000000000bkm1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:02 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:02 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014802Z-16849878b78g2m84h2v9sta290000000035000000000rk60 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:02 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:48:02 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:48:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:48:02 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T014802Z-16849878b78qwx7pmw9x5fub1c00000002hg00000000666v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:48:02 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Target ID:	0
Start time:	21:46:42
Start date:	27/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:46:48
Start date:	27/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2196,i,8796696908694474424,14027796887653547186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:46:50
Start date:	27/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://burnsmcd.alationcloud.com/compose/query/64/;1"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://burnsmcd.alationcloud.com/compose/query/64/;1

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
https://burnsmcd.alationcloud.com/compose/query/64/;1