Edit tour

Windows Analysis Report
https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en

Overview

General Information

Sample URL:	https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en
Analysis ID:	1543673
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

URL contains potential PII (phishing indication)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2724 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2536,i,13991932582242262374,1432239214346613975,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en

Sample URL: PII: %3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url

Source: https://click.sleadtrack.com/%20https://ogre.ai/en

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49735 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49792 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49793 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49843 version: TLS 1.2

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49735 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49792 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49793 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en HTTP/1.1Host: click.sleadtrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /%20https://ogre.ai/en HTTP/1.1Host: click.sleadtrack.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: click.sleadtrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://click.sleadtrack.com/%20https://ogre.ai/enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: click.sleadtrack.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 28 Oct 2024 07:43:28 GMTContent-Type: text/html; charset=utf-8Content-Length: 160Connection: closeServer: nginx/1.22.1X-Powered-By: ExpressContent-Security-Policy: default-src 'self'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 28 Oct 2024 07:43:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeServer: nginx/1.22.1X-Powered-By: ExpressContent-Security-Policy: default-src 'self'X-Content-Type-Options: nosniff

Source: chromecache_60.2.dr

String found in binary or memory: https://ogre.ai/en

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49843 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/10@4/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2536,i,13991932582242262374,1432239214346613975,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2536,i,13991932582242262374,1432239214346613975,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
smartlead-be-alb-1825251389.ap-southeast-2.elb.amazonaws.com	54.253.83.81	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
click.sleadtrack.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://click.sleadtrack.com/%20https://ogre.ai/en	false	unknown
https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en	false	unknown
https://click.sleadtrack.com/favicon.ico	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ogre.ai/en	chromecache_60.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
54.253.83.81	smartlead-be-alb-1825251389.ap-southeast-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1543673
Start date and time:	2024-10-28 08:42:28 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/10@4/5

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.131, 216.58.206.78, 142.251.5.84, 34.104.35.123, 172.202.163.200, 199.232.214.172, 192.229.221.95, 13.85.23.206, 40.69.42.241, 216.58.206.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 06:43:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9655724584146714
Encrypted:	false
SSDEEP:	48:8xcdGTimSHMUidAKZdA19ehwiZUklqehJy+3:8XLtyCy
MD5:	3F2391CA1B1B676DBCF323897291F534
SHA1:	478726886D70BFC1D99C44510D39AD857295CBA1
SHA-256:	5BE6B0E5A1738F51ABF3EA028CFDF600F2EB234D81D783A8C4F7E8C45BF2C5C3
SHA-512:	0184DEB0DAA1FD98D635A19C7D2354C4E33E7A596EA8FDA467618B4D5BFEB002AFB03D6E36BB03F5A608C6B1701E4B61CD86547325295F4409E7DE4B3050717C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....7.p..)..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\Yk=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Yk=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Yk=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Yk=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\Ym=...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............wx.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 06:43:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.980235224630811
Encrypted:	false
SSDEEP:	48:8ntcdGTimSHMUidAKZdA1weh/iZUkAQkqehyy+2:8nTLto9Qjy
MD5:	69CBE21031C87A5C872CFEC771214032
SHA1:	090C9C2401EDDCA43CCCC6B9B00DBEC9B431F4E3
SHA-256:	8391E27CE5F581694CCBC2E98B2822B95E7C41C6EC9370E743E727F8D31EF141
SHA-512:	230745CE09DB98CBEB528D734628EAFB87D33713ACA76C3091CCC4E0B20DB4707F11F616B2C718A888D94DBE0AE0E2DE14703E6428B1815DD5521C0D1BCF55E6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......c..)..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\Yk=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Yk=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Yk=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Yk=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\Ym=...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............wx.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.9973088173763704
Encrypted:	false
SSDEEP:	48:8x+cdGTimsHMUidAKZdA14tseh7sFiZUkmgqeh7sky+BX:8x8LzAnmy
MD5:	ACB45729CF7443A099D2D1DB92441923
SHA1:	471A0FDD640238B25B1F20F4B45DC70F1335F75B
SHA-256:	FEEE7FB4BB6F07023A44B181479F2E2F51B706AB1BDCCE05369704460F2C6BD2
SHA-512:	DF84D96EEC7F9488549ED105CC76CB881A0410A9ACAA902659C98C630F49BC9E9DE946972028BC3F0AD36565642FF19A88B137AC9B90CA35E47AA21A27C9CC4C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\Yk=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Yk=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Yk=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Yk=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............wx.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 06:43:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9798571963975222
Encrypted:	false
SSDEEP:	48:8KcdGTimSHMUidAKZdA1vehDiZUkwqeh+y+R:8ILtz8y
MD5:	8403AD7D7042A194EEB585B0D316528D
SHA1:	8878F6F113FAB2E3FDE0EB4F0473BD8EFF2D9CA2
SHA-256:	9A3E87B7897CF2D2B0048C3BF5EF9D6D3F8F90A562ECAC028868A159365FDAD2
SHA-512:	51128BC144E3528FAF5CA81B0496C48DEE068AD63E58699C54DBE15380F786611B6C7235AA970B28B3AB6D92D203C8A040D027C9E81B6F827A97927313F9BBB8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....p^..)..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\Yk=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Yk=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Yk=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Yk=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\Ym=...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............wx.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 06:43:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9690316207080283
Encrypted:	false
SSDEEP:	48:8tcdGTimSHMUidAKZdA1hehBiZUk1W1qeh4y+C:8TLtj9Yy
MD5:	F74AFA3102B1BA6D0E12EDF4B07E4CE2
SHA1:	A714BC44CF62C5E5D82CA037F6A5E9AFD4902911
SHA-256:	8A6A7256DC424841C87EA5DF557A1562B3081495BD0AF296D0934CAA09F5C944
SHA-512:	214D44C4EB4CFBECCBFFF225D467B9317DBC7DA63E9AF72159774C525B36FB05E18349C4BBE4AAC5034A4EE3C6C0CA6641E2DDC1E894FF9BE465E29D49BD8647
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....A.i..)..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\Yk=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Yk=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Yk=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Yk=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\Ym=...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............wx.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 06:43:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9797850953044116
Encrypted:	false
SSDEEP:	48:8HIcdGTimSHMUidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8HuLtTT/TbxWOvTbmy7T
MD5:	3E0DDC74F776014174C95B52A81CE279
SHA1:	DB39E00D5CEC52C62F7018A86EAD43286AFA632C
SHA-256:	6BACC5E075C76D047F186424571B169255441CDB3A20DE1AE79498A2DF34B3D0
SHA-512:	104E75C7606C8DB4899A69E5C01AFA5A58EA8041471E10DA97F35B591FBE3C86C8E07AA75075A78C1F3155458C2C792EC5DCBF37F656B60B5EB31BC49C29796C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....N.V..)..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\Yk=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Yk=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Yk=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Yk=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\Ym=...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............wx.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	150
Entropy (8bit):	4.817012895739808
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KDETqLLMu9MK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqiLMcMKj
MD5:	84241342D84AC29592A5D9516F8EDF7F
SHA1:	03C53980E18E17625F439C20E7D438F066202428
SHA-256:	6E21162BC64073FE9E3D3D6375CA24D04FED1912A5B7716AAC0CB0F2D16FAE7C
SHA-512:	7509483335C7A30365F7F403098491AC0B44FFFCC68A5CDACB86EC191F02DBDA5B16A20A09E924B6A29AC938578D43BACB9A50115DB5C5668EA27FE1811BD530
Malicious:	false
Reputation:	low
URL:	https://click.sleadtrack.com/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /favicon.ico</pre>.</body>.</html>.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	4.8500219547789625
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KGNMLeELwtK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiq5NManKj
MD5:	CB585A6F8D478654F2724C3E7623E11F
SHA1:	96294CA9627FF81130653050AE4CCE76E766AB80
SHA-256:	EDDB410C01C56A0B0FE4B1DBEC19CF9862A75BEE4333A9FB558251D48B620421
SHA-512:	36D0D6187B5A26DAB31765CBEED764170E8F4E15425CC1677450B2EDB991F5E4330E2C22422A18C9DDB983A7D6744EB12B15E7C9B60B7CA830F0D525A652857B
Malicious:	false
Reputation:	low
URL:	https://click.sleadtrack.com/%20https://ogre.ai/en
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /%20https://ogre.ai/en</pre>.</body>.</html>.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 08:43:18.710391998 CET	49675	443	192.168.2.5	23.1.237.91
Oct 28, 2024 08:43:18.710419893 CET	49674	443	192.168.2.5	23.1.237.91
Oct 28, 2024 08:43:18.850936890 CET	49673	443	192.168.2.5	23.1.237.91
Oct 28, 2024 08:43:26.203308105 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:26.203337908 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:26.203438997 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:26.203865051 CET	49710	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:26.203895092 CET	443	49710	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:26.203963995 CET	49710	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:26.204246998 CET	49710	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:26.204267025 CET	443	49710	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:26.204427958 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:26.204441071 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.498255968 CET	443	49710	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.499269009 CET	49710	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:27.499300957 CET	443	49710	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.500767946 CET	443	49710	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.500837088 CET	49710	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:27.502320051 CET	49710	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:27.502413988 CET	443	49710	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.502533913 CET	49710	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:27.502543926 CET	443	49710	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.516642094 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.516899109 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:27.516920090 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.520595074 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.520680904 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:27.521006107 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:27.521177053 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.558785915 CET	49710	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:27.568841934 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:27.568850040 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.619904041 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:27.812216043 CET	443	49710	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.812298059 CET	443	49710	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:27.812459946 CET	49710	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:28.144274950 CET	49710	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:28.144310951 CET	443	49710	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:28.153718948 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:28.199337006 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:28.319397926 CET	49674	443	192.168.2.5	23.1.237.91
Oct 28, 2024 08:43:28.319552898 CET	49675	443	192.168.2.5	23.1.237.91
Oct 28, 2024 08:43:28.460119963 CET	49673	443	192.168.2.5	23.1.237.91
Oct 28, 2024 08:43:28.466748953 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:28.466850042 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:28.466896057 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:28.469108105 CET	49709	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:28.469125986 CET	443	49709	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:28.594333887 CET	49713	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:43:28.594430923 CET	443	49713	142.250.186.132	192.168.2.5
Oct 28, 2024 08:43:28.594500065 CET	49713	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:43:28.595084906 CET	49713	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:43:28.595125914 CET	443	49713	142.250.186.132	192.168.2.5
Oct 28, 2024 08:43:28.608292103 CET	49714	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:28.608323097 CET	443	49714	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:28.608398914 CET	49714	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:28.608649015 CET	49714	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:28.608664989 CET	443	49714	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:29.373331070 CET	49715	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:29.373361111 CET	443	49715	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:29.373461962 CET	49715	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:29.375009060 CET	49715	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:29.375030041 CET	443	49715	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:29.465343952 CET	443	49713	142.250.186.132	192.168.2.5
Oct 28, 2024 08:43:29.465646982 CET	49713	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:43:29.465702057 CET	443	49713	142.250.186.132	192.168.2.5
Oct 28, 2024 08:43:29.467137098 CET	443	49713	142.250.186.132	192.168.2.5
Oct 28, 2024 08:43:29.467226028 CET	49713	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:43:29.545486927 CET	49713	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:43:29.545674086 CET	443	49713	142.250.186.132	192.168.2.5
Oct 28, 2024 08:43:29.563767910 CET	443	49714	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:29.564168930 CET	49714	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:29.564194918 CET	443	49714	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:29.564677000 CET	443	49714	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:29.565629005 CET	49714	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:29.565710068 CET	443	49714	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:29.566101074 CET	49714	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:29.587121964 CET	49713	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:43:29.587177992 CET	443	49713	142.250.186.132	192.168.2.5
Oct 28, 2024 08:43:29.607371092 CET	443	49714	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:29.631407976 CET	49713	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:43:29.873884916 CET	443	49714	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:29.874061108 CET	443	49714	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:29.874120951 CET	49714	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:29.907583952 CET	49714	443	192.168.2.5	54.253.83.81
Oct 28, 2024 08:43:29.907598972 CET	443	49714	54.253.83.81	192.168.2.5
Oct 28, 2024 08:43:30.209608078 CET	443	49703	23.1.237.91	192.168.2.5
Oct 28, 2024 08:43:30.209718943 CET	49703	443	192.168.2.5	23.1.237.91
Oct 28, 2024 08:43:30.241067886 CET	443	49715	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:30.241164923 CET	49715	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:30.506005049 CET	49715	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:30.506023884 CET	443	49715	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:30.506911993 CET	443	49715	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:30.553183079 CET	49715	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:30.775213957 CET	49715	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:30.819360018 CET	443	49715	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:31.021753073 CET	443	49715	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:31.021940947 CET	443	49715	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:31.021998882 CET	49715	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:31.022392035 CET	49715	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:31.022408009 CET	443	49715	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:31.059432983 CET	49716	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:31.059483051 CET	443	49716	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:31.059556007 CET	49716	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:31.060120106 CET	49716	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:31.060136080 CET	443	49716	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:32.109026909 CET	443	49716	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:32.109103918 CET	49716	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:32.110966921 CET	49716	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:32.110975981 CET	443	49716	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:32.111213923 CET	443	49716	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:32.112262011 CET	49716	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:32.155371904 CET	443	49716	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:32.360899925 CET	443	49716	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:32.360975027 CET	443	49716	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:32.361036062 CET	49716	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:32.361840010 CET	49716	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:32.361851931 CET	443	49716	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:32.361879110 CET	49716	443	192.168.2.5	184.28.90.27
Oct 28, 2024 08:43:32.361886024 CET	443	49716	184.28.90.27	192.168.2.5
Oct 28, 2024 08:43:38.937709093 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:38.937750101 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:38.937963963 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:38.938119888 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:38.938134909 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:39.466619015 CET	443	49713	142.250.186.132	192.168.2.5
Oct 28, 2024 08:43:39.466669083 CET	443	49713	142.250.186.132	192.168.2.5
Oct 28, 2024 08:43:39.466762066 CET	49713	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:43:39.672741890 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:39.672840118 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:39.674726009 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:39.674738884 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:39.675157070 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:39.685028076 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:39.731333971 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:39.926702976 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:39.926740885 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:39.926768064 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:39.926850080 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:39.926871061 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:39.927018881 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.041770935 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.041809082 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.041855097 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.041870117 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.041898012 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.041917086 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.157318115 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.157365084 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.157449007 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.157459974 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.157489061 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.157507896 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.315893888 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.315936089 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.315993071 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.316013098 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.316051960 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.316086054 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.395699978 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.395767927 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.395828962 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.395845890 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.395855904 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.395889997 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.511012077 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.511064053 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.511116028 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.511131048 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.511177063 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.511177063 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.626319885 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.626369953 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.626420975 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.626439095 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.626499891 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.626499891 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.707144022 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.707190037 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.707238913 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.707257032 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.707292080 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.707334995 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.822457075 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.822506905 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.822598934 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.822616100 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.822629929 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.822711945 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.895137072 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.895179033 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.895225048 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.895236969 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:40.895301104 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:40.895301104 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.008224010 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.008270979 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.008346081 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.008359909 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.008378029 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.008454084 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.040035963 CET	49713	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:43:41.040101051 CET	443	49713	142.250.186.132	192.168.2.5
Oct 28, 2024 08:43:41.087665081 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.087713003 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.087760925 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.087779045 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.087853909 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.087853909 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.168772936 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.168819904 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.168870926 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.168881893 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.168961048 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.168961048 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.202929974 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.203058004 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.203068972 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.203115940 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.203135014 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.203242064 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.203279018 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.203279018 CET	49719	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.203291893 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.203299999 CET	443	49719	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.254570007 CET	49728	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.254611015 CET	443	49728	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.254698038 CET	49728	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.255832911 CET	49729	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.255887985 CET	443	49729	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.255961895 CET	49729	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.256005049 CET	49728	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.256022930 CET	443	49728	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.258289099 CET	49730	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.258302927 CET	443	49730	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.258390903 CET	49730	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.258950949 CET	49730	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.258965969 CET	443	49730	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.259661913 CET	49731	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.259687901 CET	443	49731	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.259789944 CET	49731	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.260504961 CET	49732	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.260536909 CET	443	49732	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.260621071 CET	49732	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.260651112 CET	49731	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.260678053 CET	443	49731	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.260979891 CET	49729	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.260999918 CET	443	49729	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.261275053 CET	49732	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.261291027 CET	443	49732	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.283498049 CET	443	49729	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.283659935 CET	443	49732	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.283798933 CET	49733	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.283827066 CET	443	49733	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.283881903 CET	49733	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.283946991 CET	49734	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.283967018 CET	443	49734	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.284079075 CET	49734	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.284204960 CET	49733	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.284215927 CET	443	49733	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.284344912 CET	49734	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.284359932 CET	443	49734	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.296578884 CET	443	49733	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.298423052 CET	49735	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.298444033 CET	443	49735	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.298686028 CET	49735	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.298829079 CET	49735	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.298837900 CET	443	49735	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.308234930 CET	443	49734	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.308293104 CET	49734	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.308336973 CET	49734	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.308348894 CET	443	49734	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.310122013 CET	49736	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.310162067 CET	443	49736	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.310264111 CET	49736	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.310440063 CET	49736	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.310456038 CET	443	49736	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.334564924 CET	443	49736	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.334671974 CET	49736	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.334729910 CET	49736	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.334738016 CET	443	49736	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.335061073 CET	49737	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.335098028 CET	443	49737	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.335233927 CET	49737	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.335513115 CET	49737	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:41.335529089 CET	443	49737	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.995930910 CET	443	49730	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:41.996136904 CET	443	49728	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.009236097 CET	49730	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.009248972 CET	443	49730	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.012401104 CET	49730	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.012408972 CET	443	49730	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.012974977 CET	49728	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.012984037 CET	443	49728	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.013552904 CET	49728	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.013557911 CET	443	49728	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.014750957 CET	443	49731	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.015116930 CET	49731	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.015192986 CET	443	49731	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.016223907 CET	49731	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.016247034 CET	443	49731	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.028748989 CET	443	49735	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.028855085 CET	49735	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.032388926 CET	49735	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.032397985 CET	443	49735	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.032772064 CET	443	49735	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.034466028 CET	49735	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.079334021 CET	443	49735	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.079425097 CET	443	49737	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.079518080 CET	49737	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.081316948 CET	49737	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.081325054 CET	443	49737	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.081572056 CET	443	49737	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.082581043 CET	49737	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.123331070 CET	443	49737	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.137106895 CET	443	49730	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.137151003 CET	443	49730	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.137201071 CET	49730	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.137218952 CET	443	49730	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.137242079 CET	443	49730	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.137286901 CET	49730	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.139667034 CET	443	49728	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.139734983 CET	443	49728	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.139790058 CET	49728	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.145951033 CET	443	49731	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.146018028 CET	443	49731	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.146109104 CET	49731	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.146167994 CET	443	49731	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.147145987 CET	443	49731	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.147206068 CET	49731	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.156323910 CET	49730	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.156344891 CET	443	49730	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.158849001 CET	49728	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.158858061 CET	443	49728	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.160320044 CET	49731	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.160357952 CET	443	49731	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.162553072 CET	443	49735	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.162630081 CET	443	49735	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.162894964 CET	49735	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.164324045 CET	49735	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.164340973 CET	443	49735	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.164354086 CET	49735	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.164361954 CET	443	49735	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.169368982 CET	49738	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.169416904 CET	443	49738	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.169549942 CET	49738	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.170994043 CET	49739	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.171025991 CET	443	49739	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.171147108 CET	49739	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.171894073 CET	49740	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.171931028 CET	443	49740	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.172003031 CET	49740	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.172768116 CET	49741	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.172795057 CET	443	49741	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.172854900 CET	49741	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.173058987 CET	49741	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.173074961 CET	443	49741	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.173511028 CET	49738	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.173525095 CET	443	49738	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.173717022 CET	49739	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.173732996 CET	443	49739	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.173926115 CET	49740	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.173942089 CET	443	49740	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.210783005 CET	443	49737	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.210877895 CET	443	49737	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.211105108 CET	49737	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.212232113 CET	49737	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.212244034 CET	443	49737	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.219393015 CET	49742	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.219407082 CET	443	49742	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.219470978 CET	49742	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.220007896 CET	49742	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.220022917 CET	443	49742	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.895612001 CET	443	49739	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.896255970 CET	49739	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.896281958 CET	443	49739	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.897975922 CET	49739	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.897985935 CET	443	49739	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.942159891 CET	443	49740	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.942804098 CET	49740	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.942874908 CET	443	49740	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.943309069 CET	49740	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.943341017 CET	443	49740	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.950269938 CET	443	49742	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.950563908 CET	443	49741	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.950833082 CET	49742	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.950867891 CET	443	49742	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.951069117 CET	49741	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.951091051 CET	443	49741	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.951618910 CET	49741	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.951625109 CET	443	49741	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:42.951627016 CET	49742	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:42.951647043 CET	443	49742	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.025290012 CET	443	49739	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.025443077 CET	443	49739	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.025513887 CET	49739	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.025660992 CET	49739	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.025684118 CET	443	49739	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.025698900 CET	49739	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.025706053 CET	443	49739	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.028774023 CET	49743	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.028809071 CET	443	49743	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.028920889 CET	49743	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.029113054 CET	49743	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.029124975 CET	443	49743	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.046997070 CET	443	49738	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.047522068 CET	49738	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.047552109 CET	443	49738	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.048010111 CET	49738	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.048016071 CET	443	49738	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.079914093 CET	443	49742	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.080158949 CET	443	49742	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.080226898 CET	49742	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.080374002 CET	49742	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.080374002 CET	49742	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.080411911 CET	443	49742	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.080435991 CET	443	49742	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.083537102 CET	49744	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.083564043 CET	443	49744	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.083960056 CET	49744	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.084188938 CET	49744	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.084208012 CET	443	49744	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.087611914 CET	443	49740	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.087686062 CET	443	49740	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.087781906 CET	49740	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.087887049 CET	443	49741	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.088087082 CET	443	49741	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.088104010 CET	49740	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.088140011 CET	443	49740	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.088154078 CET	49741	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.088165998 CET	49740	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.088180065 CET	443	49740	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.088579893 CET	49741	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.088601112 CET	443	49741	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.097897053 CET	49745	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.097944975 CET	443	49745	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.098181963 CET	49745	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.098329067 CET	49745	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.098342896 CET	443	49745	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.103094101 CET	49746	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.103112936 CET	443	49746	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.103399038 CET	49746	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.103801012 CET	49746	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.103811979 CET	443	49746	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.177108049 CET	443	49738	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.177175999 CET	443	49738	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.177520990 CET	49738	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.188477993 CET	49738	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.188507080 CET	443	49738	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.188519001 CET	49738	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.188525915 CET	443	49738	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.195867062 CET	49747	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.195911884 CET	443	49747	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.196141005 CET	49747	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.197423935 CET	49747	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.197444916 CET	443	49747	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.763986111 CET	443	49743	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.765338898 CET	49743	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.765363932 CET	443	49743	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.766207933 CET	49743	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.766213894 CET	443	49743	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.817212105 CET	443	49744	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.818046093 CET	49744	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.818078995 CET	443	49744	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.818803072 CET	49744	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.818830013 CET	443	49744	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.830825090 CET	443	49745	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.831775904 CET	49745	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.831798077 CET	443	49745	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.833014965 CET	49745	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.833022118 CET	443	49745	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.852941990 CET	443	49746	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.853892088 CET	49746	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.853935003 CET	443	49746	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.855257988 CET	49746	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.855267048 CET	443	49746	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.924488068 CET	443	49747	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.925122023 CET	49747	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.925133944 CET	443	49747	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.925957918 CET	49747	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.925962925 CET	443	49747	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.948463917 CET	443	49744	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.948518991 CET	443	49744	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.948591948 CET	49744	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.948767900 CET	49744	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.948786974 CET	443	49744	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.956073046 CET	49748	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.956114054 CET	443	49748	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.956302881 CET	49748	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.956742048 CET	49748	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.956763029 CET	443	49748	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.960166931 CET	443	49745	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.960235119 CET	443	49745	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.960282087 CET	49745	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.960599899 CET	49745	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.960609913 CET	443	49745	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.960619926 CET	49745	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.960624933 CET	443	49745	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.973695993 CET	49749	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.973740101 CET	443	49749	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.973804951 CET	49749	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.974126101 CET	49749	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.974164963 CET	443	49749	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.983361006 CET	443	49746	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.983506918 CET	443	49746	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.983717918 CET	49746	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.983771086 CET	49746	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.983792067 CET	443	49746	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.983808994 CET	49746	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.983817101 CET	443	49746	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.989701986 CET	49750	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.989733934 CET	443	49750	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:43.989798069 CET	49750	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.989968061 CET	49750	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:43.989976883 CET	443	49750	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.054842949 CET	443	49747	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.054920912 CET	443	49747	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.055073023 CET	49747	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.055609941 CET	49747	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.055617094 CET	443	49747	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.062364101 CET	49751	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.062405109 CET	443	49751	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.062468052 CET	49751	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.062693119 CET	49751	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.062710047 CET	443	49751	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.171956062 CET	443	49743	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.172261000 CET	443	49743	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.172333002 CET	49743	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.172420025 CET	49743	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.172420025 CET	49743	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.172445059 CET	443	49743	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.172456980 CET	443	49743	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.175035000 CET	49752	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.175143003 CET	443	49752	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.175347090 CET	49752	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.175487995 CET	49752	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.175512075 CET	443	49752	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.702686071 CET	443	49748	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.703540087 CET	49748	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.703563929 CET	443	49748	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.704718113 CET	49748	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.704725981 CET	443	49748	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.705881119 CET	443	49749	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.706614971 CET	49749	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.706676006 CET	443	49749	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.707657099 CET	49749	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.707672119 CET	443	49749	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.717874050 CET	443	49750	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.721349955 CET	49750	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.721376896 CET	443	49750	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.722697973 CET	49750	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.722704887 CET	443	49750	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.808057070 CET	443	49751	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.808937073 CET	49751	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.809000015 CET	443	49751	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.810206890 CET	49751	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.810231924 CET	443	49751	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.831875086 CET	443	49748	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.832072020 CET	443	49748	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.832142115 CET	49748	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.832623005 CET	49748	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.832643032 CET	443	49748	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.837404966 CET	443	49749	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.837554932 CET	443	49749	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.837636948 CET	49749	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.838784933 CET	49753	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.838829041 CET	443	49753	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.838913918 CET	49753	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.839370966 CET	49753	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.839385986 CET	443	49753	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.839755058 CET	49749	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.839791059 CET	443	49749	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.845204115 CET	49754	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.845278978 CET	443	49754	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.845422029 CET	49754	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.845733881 CET	49754	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.845772028 CET	443	49754	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.848975897 CET	443	49750	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.849083900 CET	443	49750	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.849309921 CET	49750	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.849608898 CET	49750	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.849622011 CET	443	49750	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.849654913 CET	49750	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.849663019 CET	443	49750	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.854480982 CET	49755	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.854494095 CET	443	49755	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.854657888 CET	49755	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.854990005 CET	49755	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.855000019 CET	443	49755	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.914329052 CET	443	49752	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.935755014 CET	49752	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.935790062 CET	443	49752	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.937417030 CET	49752	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.937437057 CET	443	49752	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.941646099 CET	443	49751	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.941749096 CET	443	49751	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.941879034 CET	49751	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.942271948 CET	49751	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.942310095 CET	443	49751	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.942356110 CET	49751	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.942373037 CET	443	49751	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.948549986 CET	49756	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.948621035 CET	443	49756	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:44.948717117 CET	49756	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.949073076 CET	49756	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:44.949107885 CET	443	49756	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.064066887 CET	443	49752	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.064145088 CET	443	49752	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.064291954 CET	49752	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.064802885 CET	49752	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.064842939 CET	443	49752	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.064870119 CET	49752	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.064887047 CET	443	49752	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.069272995 CET	49757	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.069322109 CET	443	49757	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.069447994 CET	49757	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.070306063 CET	49757	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.070332050 CET	443	49757	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.559952021 CET	443	49753	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.561731100 CET	49753	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.561789036 CET	443	49753	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.587347984 CET	443	49754	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.597444057 CET	49753	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.597459078 CET	443	49753	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.605968952 CET	49754	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.606033087 CET	443	49754	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.606580973 CET	49754	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.606595993 CET	443	49754	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.631688118 CET	443	49755	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.632245064 CET	49755	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.632260084 CET	443	49755	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.632730961 CET	49755	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.632736921 CET	443	49755	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.694508076 CET	443	49756	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.695123911 CET	49756	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.695152998 CET	443	49756	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.695678949 CET	49756	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.695686102 CET	443	49756	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.723937988 CET	443	49753	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.724003077 CET	443	49753	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.724062920 CET	49753	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.724292994 CET	49753	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.724318027 CET	443	49753	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.724327087 CET	49753	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.724333048 CET	443	49753	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.727911949 CET	49758	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.727974892 CET	443	49758	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.728051901 CET	49758	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.728240967 CET	49758	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.728259087 CET	443	49758	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.735582113 CET	443	49754	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.735670090 CET	443	49754	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.735773087 CET	49754	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.735975981 CET	49754	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.735975981 CET	49754	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.736023903 CET	443	49754	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.736059904 CET	443	49754	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.739260912 CET	49759	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.739295006 CET	443	49759	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.739372015 CET	49759	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.739531040 CET	49759	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.739545107 CET	443	49759	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.766901970 CET	443	49755	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.767076969 CET	443	49755	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.767241955 CET	49755	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.767277956 CET	49755	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.767291069 CET	443	49755	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.767301083 CET	49755	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.767307043 CET	443	49755	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.770217896 CET	49760	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.770257950 CET	443	49760	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.770345926 CET	49760	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.770499945 CET	49760	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.770517111 CET	443	49760	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.807797909 CET	443	49757	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.808387995 CET	49757	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.808408976 CET	443	49757	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.808911085 CET	49757	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.808917046 CET	443	49757	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.827944994 CET	443	49756	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.828039885 CET	443	49756	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.828130960 CET	49756	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.828361034 CET	49756	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.828381062 CET	443	49756	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.828404903 CET	49756	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.828412056 CET	443	49756	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.832092047 CET	49761	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.832139969 CET	443	49761	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.832328081 CET	49761	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.832596064 CET	49761	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.832612038 CET	443	49761	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.940454960 CET	443	49757	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.940546036 CET	443	49757	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.940598011 CET	49757	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.941152096 CET	49757	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.941174030 CET	443	49757	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.941184044 CET	49757	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.941190004 CET	443	49757	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.945858955 CET	49762	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.945915937 CET	443	49762	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:45.946106911 CET	49762	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.946335077 CET	49762	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:45.946350098 CET	443	49762	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.819083929 CET	443	49759	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.819775105 CET	49759	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.819788933 CET	443	49759	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.819819927 CET	443	49758	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.820189953 CET	443	49761	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.820339918 CET	49759	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.820348978 CET	443	49759	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.820532084 CET	49758	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.820584059 CET	443	49758	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.820741892 CET	49761	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.820754051 CET	443	49761	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.821141005 CET	49758	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.821146965 CET	443	49758	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.821671009 CET	49761	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.821676016 CET	443	49761	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.823194027 CET	443	49760	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.823565960 CET	49760	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.823597908 CET	443	49760	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.823955059 CET	49760	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.823962927 CET	443	49760	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.944130898 CET	443	49762	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.945043087 CET	49762	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.945091009 CET	443	49762	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.945993900 CET	49762	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.946008921 CET	443	49762	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.950351954 CET	443	49761	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.950862885 CET	443	49761	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.950943947 CET	49761	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.950999022 CET	49761	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.951009989 CET	443	49761	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.951039076 CET	49761	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.951044083 CET	443	49761	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.951076031 CET	443	49759	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.951194048 CET	443	49759	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.951253891 CET	49759	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.951373100 CET	49759	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.951373100 CET	49759	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.951391935 CET	443	49759	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.951404095 CET	443	49759	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.952713966 CET	443	49760	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.952857018 CET	443	49760	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.952914000 CET	49760	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.953130960 CET	49760	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.953149080 CET	443	49760	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.953164101 CET	49760	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.953171015 CET	443	49760	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.955579042 CET	443	49758	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.955734968 CET	443	49758	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.955809116 CET	49758	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.955881119 CET	49758	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.955897093 CET	443	49758	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.955913067 CET	49758	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.955920935 CET	443	49758	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.956444979 CET	49763	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.956473112 CET	443	49763	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.956641912 CET	49763	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.956691027 CET	49764	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.956727982 CET	443	49764	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.956873894 CET	49764	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.956973076 CET	49763	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.956986904 CET	443	49763	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.957029104 CET	49764	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.957039118 CET	443	49764	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.957775116 CET	49765	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.957818985 CET	443	49765	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.957935095 CET	49765	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.958035946 CET	49765	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.958050966 CET	443	49765	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.958959103 CET	49766	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.958977938 CET	443	49766	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:46.959111929 CET	49766	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.959207058 CET	49766	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:46.959222078 CET	443	49766	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.076801062 CET	443	49762	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.076877117 CET	443	49762	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.077193975 CET	49762	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.077224970 CET	49762	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.077224970 CET	49762	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.077249050 CET	443	49762	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.077263117 CET	443	49762	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.080488920 CET	49767	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.080538034 CET	443	49767	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.080769062 CET	49767	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.080960989 CET	49767	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.080976963 CET	443	49767	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.678507090 CET	443	49766	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.679860115 CET	49766	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.679860115 CET	49766	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.679893017 CET	443	49766	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.679904938 CET	443	49766	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.695193052 CET	443	49763	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.695657969 CET	49763	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.695682049 CET	443	49763	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.696299076 CET	49763	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.696304083 CET	443	49763	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.697598934 CET	443	49765	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.698388100 CET	49765	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.698388100 CET	49765	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.698412895 CET	443	49765	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.698434114 CET	443	49765	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.702019930 CET	443	49764	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.702725887 CET	49764	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.702725887 CET	49764	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.702742100 CET	443	49764	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.702749968 CET	443	49764	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.807960987 CET	443	49766	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.808047056 CET	443	49766	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.808156967 CET	49766	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.808291912 CET	49766	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.808291912 CET	49766	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.808314085 CET	443	49766	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.808324099 CET	443	49766	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.811815977 CET	49768	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.811903000 CET	443	49768	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.812027931 CET	49768	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.812211037 CET	49768	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.812247038 CET	443	49768	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.825268984 CET	443	49763	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.825329065 CET	443	49763	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.825522900 CET	49763	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.825522900 CET	49763	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.826195955 CET	49763	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.826206923 CET	443	49763	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.828082085 CET	49769	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.828116894 CET	443	49769	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.828277111 CET	49769	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.828445911 CET	49769	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.828461885 CET	443	49769	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.829307079 CET	443	49767	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.830162048 CET	49767	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.830162048 CET	49767	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.830195904 CET	443	49767	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.830231905 CET	443	49767	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.835963964 CET	443	49764	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.836023092 CET	443	49764	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.836113930 CET	49764	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.836333036 CET	49764	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.836340904 CET	443	49764	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.836379051 CET	49764	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.836385012 CET	443	49764	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.838494062 CET	49770	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.838560104 CET	443	49770	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.838737011 CET	49770	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.838972092 CET	49770	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.839008093 CET	443	49770	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.920501947 CET	443	49765	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.920598984 CET	443	49765	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.920836926 CET	49765	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.920890093 CET	49765	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.920890093 CET	49765	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.920927048 CET	443	49765	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.920952082 CET	443	49765	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.923438072 CET	49771	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.923477888 CET	443	49771	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.923686981 CET	49771	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.923744917 CET	49771	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.923752069 CET	443	49771	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.961155891 CET	443	49767	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.961343050 CET	443	49767	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.961519957 CET	49767	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.963751078 CET	49767	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.963751078 CET	49767	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.963776112 CET	443	49767	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.963815928 CET	443	49767	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.966941118 CET	49772	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.967011929 CET	443	49772	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:47.967288971 CET	49772	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.967288971 CET	49772	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:47.967375994 CET	443	49772	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.541368961 CET	443	49768	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.542049885 CET	49768	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.542115927 CET	443	49768	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.542711973 CET	49768	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.542727947 CET	443	49768	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.565917969 CET	443	49769	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.566549063 CET	49769	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.566561937 CET	443	49769	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.567178011 CET	49769	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.567182064 CET	443	49769	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.570741892 CET	443	49770	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.571420908 CET	49770	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.571435928 CET	443	49770	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.571974039 CET	49770	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.571980953 CET	443	49770	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.663101912 CET	443	49771	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.663779974 CET	49771	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.663789034 CET	443	49771	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.664825916 CET	49771	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.664829969 CET	443	49771	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.670845032 CET	443	49768	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.671117067 CET	443	49768	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.671200991 CET	49768	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.671466112 CET	49768	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.671487093 CET	443	49768	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.671498060 CET	49768	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.671504021 CET	443	49768	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.675801039 CET	49773	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.675849915 CET	443	49773	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.675975084 CET	49773	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.676354885 CET	49773	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.676372051 CET	443	49773	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.695983887 CET	443	49769	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.696242094 CET	443	49769	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.696305990 CET	49769	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.696471930 CET	49769	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.696471930 CET	49769	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.696491003 CET	443	49769	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.696501970 CET	443	49769	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.699682951 CET	49774	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.699728966 CET	443	49774	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.700033903 CET	49774	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.700181007 CET	49774	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.700200081 CET	443	49774	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.701376915 CET	443	49770	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.701590061 CET	443	49770	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.701643944 CET	49770	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.701670885 CET	49770	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.701683044 CET	443	49770	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.701694965 CET	49770	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.701699972 CET	443	49770	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.702470064 CET	443	49772	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.702836037 CET	49772	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.702853918 CET	443	49772	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.703283072 CET	49772	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.703289032 CET	443	49772	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.704164028 CET	49775	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.704193115 CET	443	49775	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.704355001 CET	49775	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.704531908 CET	49775	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.704540968 CET	443	49775	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.796699047 CET	443	49771	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.796782970 CET	443	49771	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.796829939 CET	49771	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.797064066 CET	49771	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.797080994 CET	443	49771	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.797096014 CET	49771	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.797103882 CET	443	49771	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.800179005 CET	49776	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.800204039 CET	443	49776	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.800280094 CET	49776	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.800422907 CET	49776	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.800434113 CET	443	49776	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.889373064 CET	443	49772	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.889455080 CET	443	49772	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.889522076 CET	49772	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.889734030 CET	49772	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.889755011 CET	443	49772	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.889767885 CET	49772	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.889775991 CET	443	49772	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.892940998 CET	49777	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.893023014 CET	443	49777	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:48.893166065 CET	49777	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.893346071 CET	49777	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:48.893374920 CET	443	49777	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.410618067 CET	443	49773	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.411746025 CET	49773	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.411756992 CET	443	49773	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.412808895 CET	49773	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.412813902 CET	443	49773	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.432785034 CET	443	49775	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.433485985 CET	49775	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.433495998 CET	443	49775	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.434325933 CET	443	49774	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.434546947 CET	49775	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.434552908 CET	443	49775	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.435211897 CET	49774	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.435264111 CET	443	49774	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.435933113 CET	49774	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.435940981 CET	443	49774	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.536607027 CET	443	49776	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.537847996 CET	49776	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.537863016 CET	443	49776	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.539499044 CET	49776	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.539505959 CET	443	49776	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.541734934 CET	443	49773	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.541882038 CET	443	49773	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.542100906 CET	49773	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.542259932 CET	49773	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.542284966 CET	443	49773	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.542299986 CET	49773	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.542308092 CET	443	49773	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.546339035 CET	49778	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.546380043 CET	443	49778	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.546475887 CET	49778	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.546720982 CET	49778	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.546732903 CET	443	49778	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.561878920 CET	443	49775	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.562053919 CET	443	49775	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.562261105 CET	49775	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.562412024 CET	49775	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.562421083 CET	443	49775	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.565958977 CET	49779	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.566040993 CET	443	49779	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.566112995 CET	49779	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.566253901 CET	443	49774	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.566382885 CET	443	49774	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.566445112 CET	49774	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.566912889 CET	49779	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.566931009 CET	49774	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.566951036 CET	443	49779	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.566967964 CET	443	49774	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.572282076 CET	49780	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.572310925 CET	443	49780	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.572423935 CET	49780	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.572572947 CET	49780	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.572586060 CET	443	49780	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.625204086 CET	443	49777	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.625926018 CET	49777	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.626009941 CET	443	49777	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.627238989 CET	49777	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.627249002 CET	443	49777	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.668443918 CET	443	49776	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.668512106 CET	443	49776	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.668560982 CET	49776	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.668791056 CET	49776	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.668806076 CET	443	49776	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.673330069 CET	49781	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.673388958 CET	443	49781	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.673472881 CET	49781	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.673770905 CET	49781	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.673789978 CET	443	49781	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.756742001 CET	443	49777	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.756834984 CET	443	49777	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.756899118 CET	49777	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.757946014 CET	49777	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.757972956 CET	443	49777	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.757988930 CET	49777	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.757997036 CET	443	49777	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.765677929 CET	49782	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.765726089 CET	443	49782	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:49.765795946 CET	49782	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.766478062 CET	49782	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:49.766494989 CET	443	49782	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.287856102 CET	443	49778	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.288518906 CET	49778	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.288535118 CET	443	49778	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.289145947 CET	49778	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.289150000 CET	443	49778	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.293735981 CET	443	49779	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.294178009 CET	49779	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.294215918 CET	443	49779	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.294603109 CET	49779	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.294610023 CET	443	49779	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.318586111 CET	443	49780	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.319053888 CET	49780	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.319067955 CET	443	49780	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.319490910 CET	49780	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.319497108 CET	443	49780	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.415508032 CET	443	49781	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.416836977 CET	49781	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.416865110 CET	443	49781	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.421140909 CET	49781	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.421153069 CET	443	49781	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.422976017 CET	443	49779	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.423119068 CET	443	49779	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.423350096 CET	49779	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.423382044 CET	49779	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.423382044 CET	49779	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.423398972 CET	443	49779	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.423413038 CET	443	49779	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.426368952 CET	49783	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.426398039 CET	443	49783	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.426690102 CET	49783	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.426846027 CET	49783	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.426861048 CET	443	49783	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.450279951 CET	443	49780	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.450345993 CET	443	49780	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.450567961 CET	49780	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.450599909 CET	49780	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.450614929 CET	443	49780	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.450628042 CET	49780	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.450633049 CET	443	49780	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.453567028 CET	49784	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.453589916 CET	443	49784	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.453700066 CET	49784	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.453901052 CET	49784	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.453910112 CET	443	49784	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.543453932 CET	443	49782	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.543981075 CET	49782	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.543993950 CET	443	49782	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.544488907 CET	49782	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.544495106 CET	443	49782	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.547856092 CET	443	49781	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.548180103 CET	443	49781	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.548414946 CET	49781	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.548459053 CET	49781	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.548459053 CET	49781	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.548480034 CET	443	49781	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.548492908 CET	443	49781	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.551218987 CET	49785	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.551260948 CET	443	49785	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.551439047 CET	49785	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.551598072 CET	49785	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.551610947 CET	443	49785	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.572629929 CET	443	49778	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.572711945 CET	443	49778	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.572760105 CET	49778	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.572854996 CET	49778	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.572870016 CET	443	49778	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.572882891 CET	49778	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.572887897 CET	443	49778	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.575011015 CET	49786	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.575033903 CET	443	49786	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.575155020 CET	49786	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.575299025 CET	49786	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.575306892 CET	443	49786	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.672614098 CET	443	49782	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.672744989 CET	443	49782	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.672796011 CET	49782	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.672833920 CET	49782	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.672846079 CET	443	49782	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.672864914 CET	49782	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.672869921 CET	443	49782	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.674943924 CET	49787	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.674990892 CET	443	49787	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:50.675051928 CET	49787	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.675159931 CET	49787	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:50.675169945 CET	443	49787	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.189161062 CET	443	49783	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.190263987 CET	49783	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.190329075 CET	443	49783	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.191559076 CET	49783	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.191592932 CET	443	49783	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.196274996 CET	443	49784	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.197061062 CET	49784	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.197077990 CET	443	49784	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.198199034 CET	49784	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.198203087 CET	443	49784	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.292907953 CET	443	49785	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.293940067 CET	49785	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.293967962 CET	443	49785	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.295039892 CET	49785	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.295046091 CET	443	49785	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.319345951 CET	443	49786	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.319933891 CET	49786	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.319945097 CET	443	49786	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.320729017 CET	443	49783	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.321017027 CET	443	49783	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.321073055 CET	49786	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.321078062 CET	443	49786	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.321110964 CET	49783	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.321419954 CET	49783	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.321470022 CET	443	49783	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.326119900 CET	49788	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.326184034 CET	443	49788	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.326456070 CET	443	49784	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.326479912 CET	49788	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.326590061 CET	443	49784	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.326639891 CET	49784	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.326873064 CET	49788	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.326895952 CET	443	49788	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.327097893 CET	49784	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.327110052 CET	443	49784	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.327119112 CET	49784	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.327124119 CET	443	49784	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.332509995 CET	49789	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.332557917 CET	443	49789	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.332654953 CET	49789	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.333098888 CET	49789	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.333122015 CET	443	49789	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.409255981 CET	443	49787	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.409696102 CET	49787	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.409739971 CET	443	49787	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.410379887 CET	49787	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.410386086 CET	443	49787	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.425285101 CET	443	49785	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.425753117 CET	443	49785	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.425811052 CET	49785	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.426198959 CET	49785	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.426217079 CET	443	49785	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.426229000 CET	49785	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.426235914 CET	443	49785	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.440660954 CET	49790	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.440722942 CET	443	49790	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.440790892 CET	49790	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.441189051 CET	49790	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.441215992 CET	443	49790	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.452579975 CET	443	49786	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.452650070 CET	443	49786	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.452830076 CET	49786	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.453093052 CET	49786	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.453107119 CET	443	49786	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.453119993 CET	49786	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.453125954 CET	443	49786	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.459597111 CET	49791	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.459630966 CET	443	49791	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.459769964 CET	49791	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.460252047 CET	49791	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.460268974 CET	443	49791	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.472425938 CET	443	49791	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.473005056 CET	49792	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.473028898 CET	443	49792	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.473321915 CET	49792	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.473741055 CET	49792	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.473752975 CET	443	49792	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.539350986 CET	443	49787	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.539534092 CET	443	49787	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.539710045 CET	49787	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.539969921 CET	49787	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.539988995 CET	443	49787	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.540000916 CET	49787	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.540005922 CET	443	49787	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.547250986 CET	49793	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.547287941 CET	443	49793	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:51.547386885 CET	49793	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.547604084 CET	49793	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:51.547661066 CET	443	49793	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.110229015 CET	443	49789	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.110775948 CET	443	49788	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.124517918 CET	49789	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.124546051 CET	443	49789	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.125153065 CET	49789	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.125159025 CET	443	49789	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.125523090 CET	49788	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.125587940 CET	443	49788	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.125910044 CET	49788	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.125932932 CET	443	49788	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.170645952 CET	443	49790	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.224445105 CET	49790	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.229882956 CET	49790	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.229912043 CET	443	49790	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.231275082 CET	49790	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.231290102 CET	443	49790	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.235017061 CET	443	49792	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.235100031 CET	49792	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.236843109 CET	49792	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.236854076 CET	443	49792	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.237159014 CET	443	49792	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.247781992 CET	49792	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.259625912 CET	443	49789	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.259644032 CET	443	49788	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.259753942 CET	443	49788	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.259815931 CET	49788	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.260194063 CET	443	49789	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.260309935 CET	49789	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.260445118 CET	49789	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.260478973 CET	443	49789	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.260499001 CET	49789	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.260507107 CET	443	49789	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.291342974 CET	443	49792	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.295505047 CET	49788	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.295505047 CET	49788	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.295579910 CET	443	49788	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.295614004 CET	443	49788	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.343946934 CET	443	49793	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.344053984 CET	49793	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.357700109 CET	443	49790	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.357886076 CET	443	49790	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.357963085 CET	49790	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.360780001 CET	49793	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.360794067 CET	443	49793	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.361191034 CET	443	49793	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.362896919 CET	49793	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.363082886 CET	49790	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.363126040 CET	443	49790	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.363163948 CET	49790	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.363182068 CET	443	49790	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.370471001 CET	49794	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.370517015 CET	443	49794	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.370574951 CET	49794	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.373370886 CET	49795	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.373389006 CET	443	49795	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.373491049 CET	49795	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.373670101 CET	49795	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.373675108 CET	443	49795	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.376547098 CET	443	49792	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.376583099 CET	49794	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.376600027 CET	443	49794	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.376612902 CET	443	49792	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.376667023 CET	49792	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.383341074 CET	49796	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.383388996 CET	443	49796	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.383514881 CET	49796	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.384416103 CET	49792	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.384428978 CET	443	49792	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.389559984 CET	49796	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.389597893 CET	443	49796	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.392855883 CET	49797	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.392889977 CET	443	49797	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.392954111 CET	49797	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.394499063 CET	49797	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.394521952 CET	443	49797	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.407330990 CET	443	49793	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.496660948 CET	443	49793	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.496746063 CET	443	49793	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.496807098 CET	49793	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.497554064 CET	49793	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.497575998 CET	443	49793	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.502669096 CET	49798	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.502717972 CET	443	49798	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:52.502873898 CET	49798	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.503140926 CET	49798	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:52.503156900 CET	443	49798	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.111960888 CET	443	49795	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.113312960 CET	443	49794	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.113601923 CET	49795	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.113626957 CET	443	49795	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.114981890 CET	49795	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.114986897 CET	443	49795	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.118010998 CET	443	49796	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.120070934 CET	49796	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.120122910 CET	443	49796	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.120934963 CET	49796	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.120943069 CET	443	49796	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.121592999 CET	49794	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.121609926 CET	443	49794	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.122579098 CET	49794	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.122584105 CET	443	49794	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.140011072 CET	443	49797	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.140480042 CET	49797	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.140520096 CET	443	49797	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.141093969 CET	49797	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.141107082 CET	443	49797	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.242646933 CET	443	49795	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.242844105 CET	443	49795	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.242898941 CET	49795	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.243204117 CET	49795	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.243216038 CET	443	49795	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.243227005 CET	49795	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.243236065 CET	443	49795	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.245316982 CET	443	49798	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.245918989 CET	49798	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.245944977 CET	443	49798	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.246155977 CET	49799	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.246187925 CET	443	49799	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.246381044 CET	49798	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.246387959 CET	443	49798	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.246416092 CET	49799	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.246568918 CET	49799	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.246577024 CET	443	49799	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.248796940 CET	443	49794	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.248996973 CET	443	49794	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.249066114 CET	49794	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.249098063 CET	49794	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.249109030 CET	443	49794	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.249119043 CET	49794	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.249124050 CET	443	49794	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.251295090 CET	49800	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.251334906 CET	443	49800	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.251390934 CET	49800	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.251431942 CET	443	49796	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.251620054 CET	49800	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.251636028 CET	443	49800	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.253896952 CET	443	49796	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.253948927 CET	49796	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.254010916 CET	49796	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.254028082 CET	443	49796	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.254048109 CET	49796	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.254054070 CET	443	49796	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.256109953 CET	49801	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.256158113 CET	443	49801	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.256305933 CET	49801	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.256453991 CET	49801	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.256467104 CET	443	49801	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.281884909 CET	443	49797	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.281939983 CET	443	49797	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.282083035 CET	49797	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.282134056 CET	49797	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.282144070 CET	443	49797	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.282154083 CET	49797	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.282160044 CET	443	49797	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.284146070 CET	49802	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.284158945 CET	443	49802	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.284274101 CET	49802	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.284420967 CET	49802	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.284437895 CET	443	49802	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.377325058 CET	443	49798	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.377408981 CET	443	49798	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.377460957 CET	49798	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.377665997 CET	49798	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.377688885 CET	443	49798	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.377703905 CET	49798	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.377711058 CET	443	49798	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.381032944 CET	49803	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.381081104 CET	443	49803	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.381285906 CET	49803	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.381463051 CET	49803	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.381478071 CET	443	49803	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.993943930 CET	443	49799	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.994508982 CET	49799	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.994545937 CET	443	49799	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:53.995034933 CET	49799	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:53.995044947 CET	443	49799	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.016527891 CET	443	49801	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.017055988 CET	49801	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.017098904 CET	443	49801	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.017620087 CET	49801	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.017630100 CET	443	49801	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.026388884 CET	443	49800	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.026803970 CET	49800	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.026823997 CET	443	49800	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.027431965 CET	49800	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.027436972 CET	443	49800	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.053499937 CET	443	49802	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.053894997 CET	49802	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.053911924 CET	443	49802	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.054322004 CET	49802	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.054327011 CET	443	49802	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.111978054 CET	443	49803	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.112503052 CET	49803	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.112579107 CET	443	49803	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.112946987 CET	49803	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.112962008 CET	443	49803	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.126805067 CET	443	49799	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.126900911 CET	443	49799	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.126975060 CET	49799	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.127237082 CET	49799	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.127255917 CET	443	49799	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.127307892 CET	49799	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.127321959 CET	443	49799	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.130438089 CET	49804	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.130480051 CET	443	49804	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.130573034 CET	49804	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.130880117 CET	49804	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.130897999 CET	443	49804	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.152344942 CET	443	49801	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.152411938 CET	443	49801	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.152478933 CET	49801	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.152663946 CET	49801	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.152683973 CET	443	49801	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.152698040 CET	49801	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.152705908 CET	443	49801	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.156390905 CET	49805	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.156466007 CET	443	49805	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.156563997 CET	49805	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.156680107 CET	49805	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.156713963 CET	443	49805	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.168323994 CET	443	49800	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.168447971 CET	443	49800	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.168518066 CET	49800	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.168642998 CET	49800	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.168662071 CET	443	49800	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.168664932 CET	49800	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.168673038 CET	443	49800	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.172518015 CET	49806	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.172553062 CET	443	49806	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.172657967 CET	49806	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.172924995 CET	49806	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.172936916 CET	443	49806	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.198033094 CET	443	49802	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.198295116 CET	443	49802	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.198482037 CET	49802	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.198599100 CET	49802	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.198609114 CET	443	49802	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.198618889 CET	49802	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.198625088 CET	443	49802	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.202157021 CET	49807	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.202188015 CET	443	49807	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.202280045 CET	49807	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.202564001 CET	49807	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.202585936 CET	443	49807	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.247160912 CET	443	49803	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.247248888 CET	443	49803	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.247539997 CET	49803	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.247631073 CET	49803	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.247642040 CET	443	49803	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.247658968 CET	49803	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.247665882 CET	443	49803	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.251203060 CET	49808	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.251230001 CET	443	49808	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.251329899 CET	49808	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.251610041 CET	49808	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.251624107 CET	443	49808	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.871887922 CET	443	49804	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.872663021 CET	49804	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.872690916 CET	443	49804	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.873367071 CET	49804	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.873377085 CET	443	49804	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.901581049 CET	443	49805	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.902185917 CET	49805	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.902230024 CET	443	49805	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.902810097 CET	49805	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.902817011 CET	443	49805	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.924593925 CET	443	49806	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.925563097 CET	49806	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.925589085 CET	443	49806	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.925995111 CET	49806	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.926004887 CET	443	49806	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.928632975 CET	443	49807	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.929007053 CET	49807	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.929029942 CET	443	49807	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.929368973 CET	49807	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.929375887 CET	443	49807	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.990647078 CET	443	49808	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.991182089 CET	49808	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.991215944 CET	443	49808	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:54.991847992 CET	49808	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:54.991857052 CET	443	49808	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.003283978 CET	443	49804	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.003791094 CET	443	49804	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.003866911 CET	49804	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.003954887 CET	49804	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.003954887 CET	49804	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.003979921 CET	443	49804	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.003994942 CET	443	49804	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.007258892 CET	49809	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.007297993 CET	443	49809	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.007591009 CET	49809	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.007813931 CET	49809	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.007828951 CET	443	49809	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.035621881 CET	443	49805	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.035866022 CET	443	49805	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.036012888 CET	49805	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.036106110 CET	49805	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.036127090 CET	443	49805	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.036140919 CET	49805	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.036149025 CET	443	49805	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.040714979 CET	49810	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.040754080 CET	443	49810	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.040828943 CET	49810	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.041064024 CET	49810	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.041080952 CET	443	49810	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.055697918 CET	443	49806	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.055941105 CET	443	49806	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.056019068 CET	49806	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.056080103 CET	49806	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.056080103 CET	49806	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.056102991 CET	443	49806	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.056116104 CET	443	49806	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.057919025 CET	443	49807	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.057986021 CET	443	49807	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.058054924 CET	443	49807	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.058058023 CET	49807	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.058113098 CET	49807	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.058159113 CET	49807	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.058159113 CET	49807	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.058171034 CET	443	49807	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.058181047 CET	443	49807	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.059356928 CET	49811	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.059398890 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.059586048 CET	49811	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.059720993 CET	49811	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.059735060 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.060436964 CET	49812	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.060467958 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.060559988 CET	49812	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.060734034 CET	49812	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.060750961 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.121819019 CET	443	49808	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.121911049 CET	443	49808	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.122070074 CET	49808	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.122169971 CET	49808	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.122199059 CET	443	49808	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.122215986 CET	49808	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.122222900 CET	443	49808	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.125335932 CET	49813	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.125386953 CET	443	49813	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.125492096 CET	49813	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.125679970 CET	49813	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.125688076 CET	443	49813	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.760294914 CET	443	49810	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.760968924 CET	49810	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.761039019 CET	443	49810	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.761508942 CET	49810	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.761517048 CET	443	49810	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.762140989 CET	443	49809	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.762516022 CET	49809	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.762543917 CET	443	49809	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.763015032 CET	49809	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.763020992 CET	443	49809	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.796308041 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.797113895 CET	49811	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.797148943 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.797604084 CET	49811	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.797610998 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.797734976 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.798139095 CET	49812	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.798171997 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.798547029 CET	49812	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.798552990 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.870843887 CET	443	49813	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.871417999 CET	49813	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.871448994 CET	443	49813	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.871905088 CET	49813	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.871915102 CET	443	49813	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.888166904 CET	443	49810	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.888194084 CET	443	49810	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.888273954 CET	443	49810	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.888277054 CET	49810	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.888355017 CET	49810	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.888588905 CET	49810	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.888613939 CET	443	49810	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.888632059 CET	49810	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.888641119 CET	443	49810	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.891866922 CET	49814	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.891910076 CET	443	49814	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.891982079 CET	49814	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.892107010 CET	49814	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.892119884 CET	443	49814	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.927253962 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.927282095 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.927362919 CET	49811	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.927386999 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.927402020 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.927444935 CET	49811	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.927828074 CET	49811	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.927843094 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.927853107 CET	49811	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.927858114 CET	443	49811	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.928556919 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.928581953 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.928644896 CET	49812	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.928663015 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.928725958 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.928776979 CET	49812	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.928970098 CET	49812	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.928982973 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.928992987 CET	49812	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.928997993 CET	443	49812	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.931514978 CET	49815	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.931531906 CET	49816	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.931555986 CET	443	49815	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.931566954 CET	443	49816	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.931670904 CET	49815	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.931715965 CET	49816	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.931804895 CET	49816	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.931822062 CET	443	49816	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.931885958 CET	49815	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.931898117 CET	443	49815	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.978148937 CET	443	49809	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.978344917 CET	443	49809	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.978399038 CET	49809	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.979412079 CET	49809	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.979432106 CET	443	49809	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.979444027 CET	49809	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.979449987 CET	443	49809	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.982156038 CET	49817	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.982178926 CET	443	49817	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:55.982355118 CET	49817	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.982666969 CET	49817	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:55.982677937 CET	443	49817	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.003106117 CET	443	49813	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.003563881 CET	443	49813	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.003618956 CET	443	49813	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.003628969 CET	49813	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.003703117 CET	49813	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.003823042 CET	49813	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.003849030 CET	443	49813	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.003870010 CET	49813	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.003880024 CET	443	49813	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.006993055 CET	49818	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.007034063 CET	443	49818	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.007101059 CET	49818	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.007297993 CET	49818	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.007323027 CET	443	49818	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.635596991 CET	443	49814	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.636176109 CET	49814	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.636205912 CET	443	49814	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.636810064 CET	49814	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.636816978 CET	443	49814	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.670618057 CET	443	49816	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.671292067 CET	49816	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.671339035 CET	443	49816	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.671782970 CET	49816	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.671789885 CET	443	49816	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.684478045 CET	443	49815	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.685034990 CET	49815	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.685060978 CET	443	49815	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.685592890 CET	49815	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.685605049 CET	443	49815	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.728987932 CET	443	49817	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.729593992 CET	49817	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.729613066 CET	443	49817	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.730099916 CET	49817	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.730106115 CET	443	49817	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.745652914 CET	443	49818	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.746079922 CET	49818	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.746103048 CET	443	49818	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.746512890 CET	49818	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.746519089 CET	443	49818	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.769952059 CET	443	49814	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.770106077 CET	443	49814	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.770174026 CET	49814	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.770315886 CET	49814	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.770359993 CET	443	49814	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.770387888 CET	49814	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.770404100 CET	443	49814	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.773741961 CET	49819	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.773773909 CET	443	49819	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.773838043 CET	49819	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.774203062 CET	49819	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.774214029 CET	443	49819	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.801795959 CET	443	49816	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.801871061 CET	443	49816	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.802038908 CET	49816	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.802803993 CET	49816	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.802834988 CET	443	49816	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.802853107 CET	49816	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.802861929 CET	443	49816	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.805943966 CET	49820	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.805989027 CET	443	49820	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.806108952 CET	49820	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.806221008 CET	49820	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.806229115 CET	443	49820	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.813076019 CET	443	49815	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.813185930 CET	443	49815	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.813308001 CET	443	49815	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.813321114 CET	49815	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.813390970 CET	49815	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.813415051 CET	49815	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.813433886 CET	443	49815	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.813450098 CET	49815	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.813456059 CET	443	49815	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.815701008 CET	49821	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.815753937 CET	443	49821	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.815821886 CET	49821	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.815993071 CET	49821	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.816008091 CET	443	49821	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.859003067 CET	443	49817	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.859072924 CET	443	49817	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.859209061 CET	49817	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.859220982 CET	443	49817	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.859417915 CET	443	49817	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.859483004 CET	49817	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.859694958 CET	49817	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.859704971 CET	443	49817	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.866466045 CET	49822	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.866491079 CET	443	49822	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.866556883 CET	49822	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.866858959 CET	49822	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.866878033 CET	443	49822	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.876807928 CET	443	49818	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.876879930 CET	443	49818	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.877367020 CET	49818	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.877486944 CET	49818	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.877496004 CET	443	49818	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.877549887 CET	49818	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.877556086 CET	443	49818	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.886003971 CET	49823	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.886027098 CET	443	49823	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:56.886164904 CET	49823	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.886497974 CET	49823	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:56.886509895 CET	443	49823	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.520087004 CET	443	49819	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.520920992 CET	49819	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.520936966 CET	443	49819	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.521805048 CET	49819	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.521810055 CET	443	49819	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.548851967 CET	443	49820	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.549494028 CET	49820	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.549513102 CET	443	49820	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.550879955 CET	49820	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.550884962 CET	443	49820	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.592591047 CET	443	49822	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.593158007 CET	49822	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.593169928 CET	443	49822	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.593645096 CET	49822	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.593648911 CET	443	49822	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.629544973 CET	443	49823	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.639005899 CET	49823	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.639005899 CET	49823	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.639031887 CET	443	49823	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.639043093 CET	443	49823	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.654403925 CET	443	49819	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.654431105 CET	443	49819	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.654484987 CET	49819	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.654499054 CET	443	49819	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.654520035 CET	443	49819	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.654561043 CET	49819	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.654906034 CET	49819	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.654917955 CET	443	49819	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.660007000 CET	49824	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.660056114 CET	443	49824	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.660137892 CET	49824	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.660706997 CET	49824	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.660722971 CET	443	49824	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.896881104 CET	443	49820	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897002935 CET	443	49820	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897018909 CET	443	49823	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897046089 CET	443	49823	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897063971 CET	49820	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.897083998 CET	443	49823	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897139072 CET	49823	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.897140026 CET	49823	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.897306919 CET	443	49822	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897313118 CET	49820	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.897332907 CET	443	49820	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897344112 CET	49820	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.897349119 CET	443	49820	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897367001 CET	49823	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.897413969 CET	443	49823	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897444010 CET	49823	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.897459984 CET	443	49823	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897466898 CET	443	49822	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.897520065 CET	49822	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.897993088 CET	49822	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.897998095 CET	443	49822	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.898009062 CET	49822	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.898011923 CET	443	49822	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.900650024 CET	49825	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.900681019 CET	443	49825	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.900813103 CET	49826	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.900847912 CET	49825	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.900847912 CET	443	49826	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.900897026 CET	49826	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.901067972 CET	49825	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.901081085 CET	443	49825	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.901164055 CET	49826	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.901181936 CET	443	49826	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.901478052 CET	49827	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.901487112 CET	443	49827	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:57.901601076 CET	49827	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.901734114 CET	49827	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:57.901737928 CET	443	49827	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.606882095 CET	443	49824	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.607554913 CET	49824	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.607590914 CET	443	49824	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.608526945 CET	49824	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.608539104 CET	443	49824	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.611905098 CET	443	49821	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.614223957 CET	49821	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.614273071 CET	443	49821	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.615117073 CET	49821	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.615133047 CET	443	49821	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.632917881 CET	443	49825	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.633269072 CET	49825	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.633287907 CET	443	49825	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.633745909 CET	49825	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.633752108 CET	443	49825	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.638956070 CET	443	49826	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.639487982 CET	49826	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.639527082 CET	443	49826	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.640496016 CET	49826	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.640505075 CET	443	49826	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.648224115 CET	443	49827	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.650444031 CET	49827	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.650458097 CET	443	49827	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.650979996 CET	49827	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.650985003 CET	443	49827	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.734229088 CET	443	49824	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.734467030 CET	443	49824	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.734565973 CET	49824	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.734986067 CET	49824	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.735012054 CET	443	49824	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.735027075 CET	49824	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.735034943 CET	443	49824	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.739275932 CET	49828	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.739335060 CET	443	49828	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.739418030 CET	49828	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.739634991 CET	49828	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.739655018 CET	443	49828	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.742239952 CET	443	49821	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.742356062 CET	443	49821	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.742435932 CET	49821	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.742460966 CET	443	49821	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.742538929 CET	49821	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.742811918 CET	49821	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.742811918 CET	49821	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.742854118 CET	443	49821	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.742868900 CET	443	49821	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.745779991 CET	49829	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.745814085 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.745944023 CET	49829	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.746083975 CET	49829	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.746088982 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.761253119 CET	443	49825	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.761322975 CET	443	49825	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.761434078 CET	443	49825	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.761490107 CET	49825	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.761965990 CET	49825	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.761965990 CET	49825	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.761981010 CET	443	49825	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.761989117 CET	443	49825	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.764583111 CET	49830	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.764595985 CET	443	49830	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.764704943 CET	49830	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.764919043 CET	49830	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.764945030 CET	443	49830	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.770998001 CET	443	49826	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.771162033 CET	443	49826	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.771215916 CET	49826	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.771348000 CET	49826	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.771354914 CET	443	49826	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.775428057 CET	49831	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.775439024 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.775587082 CET	49831	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.775808096 CET	49831	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.775818110 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.779400110 CET	443	49827	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.779431105 CET	443	49827	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.779473066 CET	443	49827	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.779483080 CET	49827	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.779524088 CET	49827	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.779851913 CET	49827	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.779856920 CET	443	49827	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.779866934 CET	49827	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.779871941 CET	443	49827	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.783626080 CET	49832	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.783658028 CET	443	49832	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:58.783730030 CET	49832	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.783879995 CET	49832	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:58.783899069 CET	443	49832	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.508304119 CET	443	49830	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.508917093 CET	49830	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.508966923 CET	443	49830	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.509299994 CET	443	49832	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.509416103 CET	49830	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.509423971 CET	443	49830	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.509761095 CET	49832	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.509798050 CET	443	49832	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.510061026 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.510195017 CET	49832	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.510202885 CET	443	49832	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.510449886 CET	49831	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.510472059 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.510876894 CET	49831	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.510881901 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.519342899 CET	443	49828	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.519817114 CET	49828	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.519859076 CET	443	49828	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.520267963 CET	49828	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.520275116 CET	443	49828	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.521622896 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.521949053 CET	49829	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.521966934 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.522334099 CET	49829	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.522337914 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.638484955 CET	443	49832	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.638551950 CET	443	49832	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.638783932 CET	49832	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.638880014 CET	49832	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.638909101 CET	443	49832	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.638926983 CET	49832	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.638936043 CET	443	49832	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.641329050 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.641344070 CET	443	49830	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.641429901 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.641474962 CET	49831	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.641490936 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.641530037 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.641546011 CET	443	49830	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.641572952 CET	49831	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.641607046 CET	49831	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.641607046 CET	49831	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.641608953 CET	49830	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.641625881 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.641633987 CET	443	49831	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.641843081 CET	49830	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.641844034 CET	49830	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.641870022 CET	443	49830	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.641884089 CET	443	49830	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.642446995 CET	49833	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.642477989 CET	443	49833	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.642668009 CET	49833	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.642786980 CET	49833	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.642791986 CET	443	49833	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.646811962 CET	49834	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.646842957 CET	443	49834	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.646924019 CET	49834	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.647097111 CET	49834	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.647114992 CET	443	49834	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.647260904 CET	49835	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.647269964 CET	443	49835	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.647322893 CET	49835	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.647453070 CET	49835	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.647463083 CET	443	49835	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.653868914 CET	443	49828	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.654062986 CET	443	49828	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.654145002 CET	49828	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.654186964 CET	49828	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.654186964 CET	49828	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.654205084 CET	443	49828	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.654225111 CET	443	49828	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.656232119 CET	49836	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.656265020 CET	443	49836	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.656327009 CET	49836	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.656475067 CET	49836	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.656491041 CET	443	49836	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.657233000 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.657304049 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.657385111 CET	49829	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.657392025 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.657433987 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.657488108 CET	49829	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.657533884 CET	49829	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.657541037 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.657548904 CET	49829	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.657553911 CET	443	49829	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.660552025 CET	49837	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.660641909 CET	443	49837	13.107.246.45	192.168.2.5
Oct 28, 2024 08:43:59.660715103 CET	49837	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.660851955 CET	49837	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:43:59.660871029 CET	443	49837	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.370799065 CET	443	49834	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.375885010 CET	443	49833	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.387321949 CET	49834	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.387370110 CET	443	49834	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.388425112 CET	49834	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.388432980 CET	443	49834	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.388799906 CET	443	49835	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.389863014 CET	49833	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.389879942 CET	443	49833	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.391000986 CET	49833	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.391005993 CET	443	49833	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.391273022 CET	49835	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.391283989 CET	443	49835	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.392081022 CET	49835	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.392086029 CET	443	49835	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.410108089 CET	443	49836	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.410707951 CET	49836	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.410733938 CET	443	49836	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.411562920 CET	49836	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.411569118 CET	443	49836	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.414824963 CET	443	49837	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.415301085 CET	49837	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.415400028 CET	443	49837	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.416030884 CET	49837	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.416047096 CET	443	49837	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.511769056 CET	443	49834	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.511794090 CET	443	49834	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.511835098 CET	443	49834	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.511854887 CET	49834	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.511887074 CET	49834	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.512181997 CET	49834	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.512203932 CET	443	49834	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.512232065 CET	49834	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.512240887 CET	443	49834	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.516453981 CET	49838	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.516479969 CET	443	49838	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.516547918 CET	49838	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.516726017 CET	49838	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.516738892 CET	443	49838	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.521333933 CET	443	49835	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.521372080 CET	443	49835	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.521411896 CET	443	49835	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.521420956 CET	49835	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.521459103 CET	49835	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.521694899 CET	49835	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.521712065 CET	443	49835	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.521724939 CET	49835	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.521730900 CET	443	49835	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.523397923 CET	443	49833	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.523448944 CET	443	49833	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.523503065 CET	49833	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.523510933 CET	443	49833	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.523657084 CET	443	49833	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.523703098 CET	49833	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.523792982 CET	49833	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.523797035 CET	443	49833	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.529161930 CET	49839	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.529198885 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.529252052 CET	49839	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.530883074 CET	49840	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.530898094 CET	443	49840	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.531141996 CET	49840	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.531454086 CET	49839	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.531476021 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.531636000 CET	49840	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.531646967 CET	443	49840	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.542748928 CET	443	49836	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.542814970 CET	443	49836	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.542921066 CET	49836	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.543207884 CET	49836	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.543217897 CET	443	49836	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.543231964 CET	49836	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.543236971 CET	443	49836	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.546967983 CET	49841	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.547012091 CET	443	49841	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.547135115 CET	49841	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.547352076 CET	49841	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.547384977 CET	443	49841	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.547911882 CET	443	49837	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.548027039 CET	443	49837	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.548130035 CET	443	49837	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.548192024 CET	49837	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.548516989 CET	49837	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.548527956 CET	443	49837	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.548546076 CET	49837	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.548551083 CET	443	49837	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.553869009 CET	49842	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.553889990 CET	443	49842	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.554038048 CET	49842	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.554250956 CET	49842	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.554259062 CET	443	49842	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.559475899 CET	443	49841	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.560065985 CET	49843	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.560094118 CET	443	49843	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.560157061 CET	49843	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.560616016 CET	49843	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.560631037 CET	443	49843	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.579240084 CET	443	49842	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.579303980 CET	49842	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.579334021 CET	49842	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.579344034 CET	443	49842	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.579797029 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.579823017 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:00.579910994 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.580056906 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:00.580076933 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.197499037 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.197613955 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.197679996 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.198750019 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.198817015 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.198834896 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.210741997 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.210777998 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.261244059 CET	443	49838	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.261790037 CET	49838	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.261811972 CET	443	49838	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.262271881 CET	49838	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.262278080 CET	443	49838	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.283334970 CET	443	49840	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.283694983 CET	49840	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.283711910 CET	443	49840	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.284164906 CET	49840	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.284168959 CET	443	49840	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.292727947 CET	443	49843	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.292802095 CET	49843	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.294676065 CET	49843	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.294686079 CET	443	49843	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.294926882 CET	443	49843	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.295579910 CET	49843	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.306482077 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.306957006 CET	49839	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.307005882 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.307240963 CET	49839	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.307250977 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.336075068 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.337196112 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.337196112 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.337291002 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.337409973 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.337461948 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.339353085 CET	443	49843	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.402168989 CET	443	49838	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.402256966 CET	443	49838	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.402314901 CET	49838	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.402617931 CET	49838	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.402638912 CET	49838	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.402641058 CET	443	49838	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.402647972 CET	443	49838	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.407483101 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.416822910 CET	443	49840	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.416985035 CET	443	49840	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.417069912 CET	49840	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.417202950 CET	49840	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.417215109 CET	443	49840	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.417227030 CET	49840	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.417232990 CET	443	49840	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.420420885 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.420475960 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.422846079 CET	443	49843	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.422914028 CET	443	49843	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.423047066 CET	49843	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.423093081 CET	49843	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.423105955 CET	443	49843	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.423119068 CET	49843	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.423124075 CET	443	49843	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.425736904 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.442293882 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.442375898 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.442471027 CET	49839	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.442516088 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.442528009 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.442591906 CET	49839	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.442833900 CET	49839	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.442833900 CET	49839	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.442867994 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.442895889 CET	443	49839	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.445771933 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.445823908 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.461610079 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.501557112 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.501622915 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.504309893 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.533320904 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.535701990 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.546108961 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.548572063 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.551449060 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.553797007 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.572186947 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.575237036 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.615338087 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.629870892 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.633011103 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.633058071 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.671174049 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.674355030 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.674458027 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.676664114 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.697381020 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.699815035 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.743340015 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.754102945 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.757514954 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.757602930 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.758552074 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.761008978 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.803375006 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.969068050 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.969222069 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.973355055 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.973383904 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.973525047 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.973537922 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:01.974395990 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:01.974407911 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.091979980 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.095391989 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.095480919 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.106185913 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.108949900 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.109077930 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.109114885 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.112957001 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.113420963 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.113447905 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.113768101 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.114480972 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.114509106 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.224479914 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.227953911 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.238440990 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.241121054 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.283365965 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.286127090 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.286879063 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.287086964 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.287112951 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.292022943 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.292053938 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.292644978 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.292656898 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.296016932 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.296030045 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.353498936 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.355986118 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.356036901 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.366251945 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.368444920 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.411341906 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.417191982 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.422619104 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.422661066 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.469302893 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.476030111 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.476069927 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.484033108 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.486355066 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.488785982 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.493635893 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.495522976 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.539381981 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.548283100 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.551405907 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.551472902 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.603234053 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.608020067 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.608082056 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.609909058 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.612577915 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.619095087 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.623348951 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.667352915 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.872436047 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.872495890 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.872546911 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.872595072 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.872633934 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.876256943 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.876279116 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.876427889 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.876441002 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.878323078 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.878323078 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.878340006 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.878426075 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:02.878833055 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:02.878844976 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.001797915 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.004981995 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.005047083 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.007917881 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.007977962 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.008140087 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.008163929 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.010658026 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.010658026 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.010678053 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.012770891 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.012814999 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.012945890 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.059338093 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.130376101 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.137826920 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.137867928 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.148332119 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.148370028 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.148406029 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.148426056 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.148508072 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.151392937 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.151741982 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.151792049 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.152348995 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.152575970 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.152621031 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.279898882 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.279975891 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.282535076 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.282982111 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.282995939 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.283689976 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.284059048 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.284080029 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.286025047 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.286290884 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.286336899 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.286675930 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.331335068 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.414694071 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.414774895 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.414808035 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.415792942 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.415859938 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.415878057 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.418978930 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.419028997 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.419042110 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.419076920 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.419944048 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.420006990 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.420063972 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.420109987 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.420938015 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.420986891 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.544842005 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.548208952 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.548305035 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.550357103 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.550558090 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.550620079 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.550652027 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.554047108 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.554081917 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.554155111 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.555262089 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.555344105 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.556106091 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.599358082 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.674403906 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.677771091 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.677845001 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.679341078 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.682265997 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.684478998 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.685086012 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.685165882 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.685189962 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.688178062 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.688950062 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.688999891 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.689373016 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.735326052 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.803814888 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.809784889 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.809871912 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.811961889 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.858724117 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.859396935 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.859457970 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.859491110 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.863344908 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.863409996 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.863435030 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.863833904 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.907354116 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.935416937 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.938656092 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.938715935 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.940516949 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.942667961 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.987370014 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.989981890 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:03.992399931 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:03.992469072 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.037513971 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.040652037 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.040690899 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.042798996 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.064603090 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.067800999 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.115336895 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.115524054 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.118536949 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.118607998 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.163059950 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.166513920 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.166575909 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.169755936 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.172118902 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.176125050 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.178430080 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.193231106 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.195585012 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.243340969 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.244201899 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.248367071 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.248431921 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.293229103 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.296516895 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.296621084 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.301306009 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.303985119 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.318418980 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.321881056 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.365849018 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.368977070 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.374028921 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.376344919 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.419378042 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.421734095 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.425580978 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.425671101 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.428905010 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.430883884 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.447441101 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.449917078 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.494642019 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.498359919 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.543330908 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.546405077 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.549796104 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.549911976 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.551352978 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.554240942 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.572805882 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.575234890 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.619342089 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.621721983 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.624428988 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.624533892 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.677009106 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.679825068 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.679932117 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.706849098 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.710079908 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.710108995 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.712292910 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.751353979 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.754925013 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.797583103 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.800431013 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.807830095 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.810199022 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.841257095 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.844572067 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.882564068 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.885514975 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.929755926 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.932651997 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.941308022 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.943664074 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:04.971395016 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:04.974580050 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.013741970 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.016673088 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.059528112 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.062865019 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.073259115 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.075890064 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.098717928 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.100945950 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.147331953 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.147408009 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.149558067 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.149648905 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.188854933 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.191375971 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.191826105 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.200675964 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.202939034 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.227072954 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.229243994 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.275335073 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.282505989 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.284715891 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.284810066 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.314445019 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.316731930 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.325958967 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.327922106 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.352348089 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.354460001 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.395368099 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.402662039 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.405719995 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.405791044 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.410231113 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.412548065 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.442115068 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.444226980 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.453186989 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.455216885 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.480031013 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.482033014 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.523344040 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.531430960 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.534492016 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.534559011 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.538193941 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.544056892 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.570282936 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.573266983 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.580611944 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.582828045 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.609357119 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.611468077 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.659329891 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.660455942 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.662535906 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.662591934 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.695574045 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.697981119 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.705657959 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.707710028 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.735536098 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.738965988 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.779331923 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.787082911 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.789731979 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.789819956 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.790632010 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.792865992 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.823404074 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.833755970 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.833851099 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.833920956 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.836601019 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.836643934 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.836669922 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.864620924 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.868766069 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.911355019 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.919392109 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.948978901 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.949045897 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.949074030 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.952513933 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.952549934 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.952622890 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.952650070 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.961975098 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.993907928 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.993967056 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.993985891 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.996978998 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.997066975 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:05.997091055 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:05.997757912 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:06.039340973 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:06.078113079 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:06.080391884 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:06.080426931 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:06.083014965 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:06.085062981 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:06.122335911 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:06.169598103 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:06.169671059 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:06.169703960 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:06.220508099 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:06.220542908 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:06.267298937 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:06.267337084 CET	443	49844	13.107.246.45	192.168.2.5
Oct 28, 2024 08:44:06.314145088 CET	49844	443	192.168.2.5	13.107.246.45
Oct 28, 2024 08:44:28.618990898 CET	49847	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:44:28.619024992 CET	443	49847	142.250.186.132	192.168.2.5
Oct 28, 2024 08:44:28.619158983 CET	49847	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:44:28.620260954 CET	49847	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:44:28.620274067 CET	443	49847	142.250.186.132	192.168.2.5
Oct 28, 2024 08:44:29.501323938 CET	443	49847	142.250.186.132	192.168.2.5
Oct 28, 2024 08:44:29.501607895 CET	49847	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:44:29.501624107 CET	443	49847	142.250.186.132	192.168.2.5
Oct 28, 2024 08:44:29.501941919 CET	443	49847	142.250.186.132	192.168.2.5
Oct 28, 2024 08:44:29.502428055 CET	49847	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:44:29.502485037 CET	443	49847	142.250.186.132	192.168.2.5
Oct 28, 2024 08:44:29.552831888 CET	49847	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:44:39.500673056 CET	443	49847	142.250.186.132	192.168.2.5
Oct 28, 2024 08:44:39.500853062 CET	443	49847	142.250.186.132	192.168.2.5
Oct 28, 2024 08:44:39.500945091 CET	49847	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:44:41.046324015 CET	49847	443	192.168.2.5	142.250.186.132
Oct 28, 2024 08:44:41.046361923 CET	443	49847	142.250.186.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 08:43:24.870825052 CET	53	57204	1.1.1.1	192.168.2.5
Oct 28, 2024 08:43:24.875348091 CET	53	59311	1.1.1.1	192.168.2.5
Oct 28, 2024 08:43:26.168483019 CET	64564	53	192.168.2.5	1.1.1.1
Oct 28, 2024 08:43:26.168751001 CET	55536	53	192.168.2.5	1.1.1.1
Oct 28, 2024 08:43:26.192373037 CET	53	55536	1.1.1.1	192.168.2.5
Oct 28, 2024 08:43:26.202033043 CET	53	64564	1.1.1.1	192.168.2.5
Oct 28, 2024 08:43:26.262448072 CET	53	57683	1.1.1.1	192.168.2.5
Oct 28, 2024 08:43:28.570542097 CET	60174	53	192.168.2.5	1.1.1.1
Oct 28, 2024 08:43:28.571213961 CET	59858	53	192.168.2.5	1.1.1.1
Oct 28, 2024 08:43:28.578356028 CET	53	60174	1.1.1.1	192.168.2.5
Oct 28, 2024 08:43:28.579165936 CET	53	59858	1.1.1.1	192.168.2.5
Oct 28, 2024 08:43:43.380429029 CET	53	59971	1.1.1.1	192.168.2.5
Oct 28, 2024 08:44:02.261524916 CET	53	58305	1.1.1.1	192.168.2.5
Oct 28, 2024 08:44:24.394237041 CET	53	60274	1.1.1.1	192.168.2.5
Oct 28, 2024 08:44:24.844396114 CET	53	49205	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 08:43:26.168483019 CET	192.168.2.5	1.1.1.1	0x628d	Standard query (0)	click.sleadtrack.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:43:26.168751001 CET	192.168.2.5	1.1.1.1	0xf790	Standard query (0)	click.sleadtrack.com	65	IN (0x0001)	false
Oct 28, 2024 08:43:28.570542097 CET	192.168.2.5	1.1.1.1	0xfe37	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:43:28.571213961 CET	192.168.2.5	1.1.1.1	0x1b62	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 08:43:26.192373037 CET	1.1.1.1	192.168.2.5	0xf790	No error (0)	click.sleadtrack.com	smartlead-be-alb-1825251389.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 08:43:26.202033043 CET	1.1.1.1	192.168.2.5	0x628d	No error (0)	click.sleadtrack.com	smartlead-be-alb-1825251389.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 08:43:26.202033043 CET	1.1.1.1	192.168.2.5	0x628d	No error (0)	smartlead-be-alb-1825251389.ap-southeast-2.elb.amazonaws.com		54.253.83.81	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:43:26.202033043 CET	1.1.1.1	192.168.2.5	0x628d	No error (0)	smartlead-be-alb-1825251389.ap-southeast-2.elb.amazonaws.com		52.63.246.69	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:43:26.202033043 CET	1.1.1.1	192.168.2.5	0x628d	No error (0)	smartlead-be-alb-1825251389.ap-southeast-2.elb.amazonaws.com		54.79.249.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:43:28.578356028 CET	1.1.1.1	192.168.2.5	0xfe37	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:43:28.579165936 CET	1.1.1.1	192.168.2.5	0x1b62	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 28, 2024 08:43:38.937062025 CET	1.1.1.1	192.168.2.5	0xcb16	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 08:43:38.937062025 CET	1.1.1.1	192.168.2.5	0xcb16	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:43:39.346482992 CET	1.1.1.1	192.168.2.5	0x3eec	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:43:39.346482992 CET	1.1.1.1	192.168.2.5	0x3eec	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:43:39.983272076 CET	1.1.1.1	192.168.2.5	0x449	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 08:43:39.983272076 CET	1.1.1.1	192.168.2.5	0x449	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:43:53.232862949 CET	1.1.1.1	192.168.2.5	0x774	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 08:43:53.232862949 CET	1.1.1.1	192.168.2.5	0x774	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:44:17.312457085 CET	1.1.1.1	192.168.2.5	0xd5e3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 08:44:17.312457085 CET	1.1.1.1	192.168.2.5	0xd5e3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 08:44:37.765547037 CET	1.1.1.1	192.168.2.5	0x8b0d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 08:44:37.765547037 CET	1.1.1.1	192.168.2.5	0x8b0d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

click.sleadtrack.com

https:

fs.microsoft.com

otelrules.azureedge.net

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Oct 28, 2024 08:44:01.198750019 CET	13.107.246.45	443	192.168.2.5	49844	CN=*.azureedge.net, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 19 17:30:52 CEST 2024 Thu Jun 08 02:00:00 CEST 2023 Thu Aug 01 14:00:00 CEST 2013	Sun Sep 14 17:30:52 CEST 2025 Wed Aug 26 01:59:59 CEST 2026 Fri Jan 15 13:00:00 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
					CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 08 02:00:00 CEST 2023	Wed Aug 26 01:59:59 CEST 2026
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Fri Jan 15 13:00:00 CET 2038

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	54.253.83.81	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:27 UTC	762	OUT	GET /link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en HTTP/1.1 Host: click.sleadtrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 07:43:27 UTC	230	IN	HTTP/1.1 302 Found Date: Mon, 28 Oct 2024 07:43:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 86 Connection: close Server: nginx/1.22.1 X-Powered-By: Express Location: %20https://ogre.ai/en Vary: Accept
2024-10-28 07:43:27 UTC	86	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 25 32 30 68 74 74 70 73 3a 2f 2f 6f 67 72 65 2e 61 69 2f 65 6e 22 3e 25 32 30 68 74 74 70 73 3a 2f 2f 6f 67 72 65 2e 61 69 2f 65 6e 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="%20https://ogre.ai/en">%20https://ogre.ai/en</a></p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	54.253.83.81	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:28 UTC	684	OUT	GET /%20https://ogre.ai/en HTTP/1.1 Host: click.sleadtrack.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 07:43:28 UTC	266	IN	HTTP/1.1 404 Not Found Date: Mon, 28 Oct 2024 07:43:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 160 Connection: close Server: nginx/1.22.1 X-Powered-By: Express Content-Security-Policy: default-src 'self' X-Content-Type-Options: nosniff
2024-10-28 07:43:28 UTC	160	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 25 32 30 68 74 74 70 73 3a 2f 2f 6f 67 72 65 2e 61 69 2f 65 6e 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /%20https://ogre.ai/en</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	54.253.83.81	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:29 UTC	617	OUT	GET /favicon.ico HTTP/1.1 Host: click.sleadtrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://click.sleadtrack.com/%20https://ogre.ai/en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 07:43:29 UTC	266	IN	HTTP/1.1 404 Not Found Date: Mon, 28 Oct 2024 07:43:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 150 Connection: close Server: nginx/1.22.1 X-Powered-By: Express Content-Security-Policy: default-src 'self' X-Content-Type-Options: nosniff
2024-10-28 07:43:29 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /favicon.ico</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 07:43:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=191478 Date: Mon, 28 Oct 2024 07:43:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 07:43:32 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=191530 Date: Mon, 28 Oct 2024 07:43:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-28 07:43:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:39 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:39 UTC	561	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:39 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 27 Oct 2024 10:35:44 GMT ETag: "0x8DCF6731CF80310" x-ms-request-id: 89d6c6b8-201e-0033-2798-28b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074339Z-16849878b7898p5f6vryaqvp5800000005kg000000005zen x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:39 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-28 07:43:40 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-28 07:43:40 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-28 07:43:40 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-28 07:43:40 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-28 07:43:40 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-28 07:43:40 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-28 07:43:40 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-28 07:43:40 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-28 07:43:40 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:42 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:42 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074342Z-16849878b78qg9mlz11wgn0wcc000000048000000000b5vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:42 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:42 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5e9af5f8-e01e-0099-17f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074342Z-15b8d89586fvk4kmbg8pf84y8800000005rg000000000bug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:42 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:42 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:42 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074342Z-16849878b7828dsgct3vrzta700000000350000000006cb6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:42 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:42 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074342Z-17c5cb586f6z6tw6g7cmdv30m800000005tg000000007um3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:42 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:42 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074342Z-15b8d89586f5s5nz3ffrgxn5ac00000005e0000000001p8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:42 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 0d0c59f1-101e-005a-526a-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074342Z-r197bdfb6b4jlq9hb8xf0re6t400000004t00000000047n2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:43 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:42 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 962f3e82-b01e-0070-52cb-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074343Z-r197bdfb6b48v72xb403uy6hns000000058g000000004ap5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:42 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:43 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074343Z-16849878b785jrf8dn0d2rczaw00000005wg0000000066wh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:42 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:43 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 4ec88854-201e-0033-236a-27b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074343Z-r197bdfb6b42rt68rzg9338g1g00000005w00000000069m3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:43 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:43 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:43 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 91249574-801e-0078-3dc7-27bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074343Z-17c5cb586f672xmrz843mf85fn00000003fg000000005mvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:43 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:43 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:44 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: f0c209fa-601e-00ab-740d-2966f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074343Z-17c5cb586f65j4snyp1hqk5z2s000000061g0000000073yr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-28 07:43:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:43 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:43 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074343Z-16849878b786fl7gm2qg4r5y7000000004xg00000000d930 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:43 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:43 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:43 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c47ae6f3-801e-007b-6937-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074343Z-r197bdfb6b4jlq9hb8xf0re6t400000004s0000000005beb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:43 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:43 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30dbe6fd-101e-0034-66db-2696ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074343Z-17c5cb586f6b6kj91vqtm6kxaw00000003f000000000282k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:43 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:43 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f94f539d-b01e-001e-773a-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074343Z-15b8d89586f8nxpt6ys645x5v00000000600000000001egd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:44 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e9316c32-001e-0014-265e-275151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074344Z-r197bdfb6b4bs5qf58wn14wgm000000003kg00000000aemm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:44 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074344Z-16849878b78qwx7pmw9x5fub1c00000002t000000000dn9b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:44 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:44 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074344Z-16849878b78smng4k6nq15r6s4000000065g00000000cvgy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:44 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:44 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 47f8d5d2-401e-005b-1e67-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074344Z-16849878b78g2m84h2v9sta29000000003ng0000000071mz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:44 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074344Z-16849878b78qwx7pmw9x5fub1c00000002t000000000dn9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:45 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:45 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074345Z-16849878b78qfbkc5yywmsbg0c00000004dg000000005cz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:45 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:45 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 0fc246dd-801e-0035-4529-26752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074345Z-15b8d89586fhl2qtatrz3vfkf00000000am000000000a7s4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:45 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:45 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074345Z-16849878b786lft2mu9uftf3y400000005zg0000000077b2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:45 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:45 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:45 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074345Z-16849878b78tg5n42kspfr0x4800000004ug000000001rst x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:45 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:45 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 111e84cc-b01e-003e-6d58-268e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074345Z-17c5cb586f6wnfhvhw6gvetfh40000000440000000005mqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:46 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074346Z-16849878b7867ttgfbpnfxt44s00000004hg000000009up2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:46 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:46 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: ff77512b-301e-000c-17f4-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074346Z-15b8d89586frzkk2umu6w8qnt80000000n3000000000ayxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:46 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:46 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:46 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: ce95f5ab-001e-0034-242a-27dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074346Z-r197bdfb6b4jlq9hb8xf0re6t400000004s0000000005bgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:46 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:46 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:46 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074346Z-16849878b78g2m84h2v9sta29000000003hg00000000ecn2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:46 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:46 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074346Z-16849878b78q9m8bqvwuva4svc00000003b0000000001dad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:47 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:47 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 11ec9ee4-a01e-0053-158c-268603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074347Z-r197bdfb6b4d9xksru4x6qbqr000000004n00000000086fg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:47 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:47 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:47 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074347Z-16849878b78fssff8btnns3b1400000004yg00000000agec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:47 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:47 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:47 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e7d99bfb-a01e-001e-60e3-2649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074347Z-r197bdfb6b46krmwag4tzr9x7c00000004c000000000b17x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:47 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:47 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:47 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074347Z-16849878b787wpl5wqkt5731b400000005c000000000eann x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:47 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:47 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:47 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074347Z-16849878b78qg9mlz11wgn0wcc000000048000000000b61s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:47 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:48 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7ae13fc9-101e-005a-3933-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074348Z-17c5cb586f626sn8grcgm1gf8000000003a0000000000drs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:48 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:48 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074348Z-16849878b78g2m84h2v9sta29000000003p0000000005kuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:48 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:48 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:48 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074348Z-16849878b78sx229w7g7at4nkg00000002xg00000000b2pw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:48 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:48 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074348Z-16849878b78fhxrnedubv5byks000000030000000000azts x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:48 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:48 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b14e1d55-401e-0078-709c-274d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074348Z-17c5cb586f6wmhkn5q6fu8c5ss0000000430000000003qps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:48 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:49 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:49 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074349Z-16849878b78sx229w7g7at4nkg00000002vg00000000f97r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:49 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:49 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:49 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074349Z-15b8d89586frzkk2umu6w8qnt80000000n3g00000000atuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:49 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:49 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:49 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074349Z-16849878b78nx5sne3fztmu6xc00000005t0000000001yy9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:49 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:49 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074349Z-16849878b78xblwksrnkakc08w0000000410000000003h4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:49 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:49 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074349Z-16849878b786lft2mu9uftf3y400000005x000000000btbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:50 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:50 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: d0d63b60-601e-0050-7d63-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074350Z-r197bdfb6b4g24ztpxkw4umce80000000670000000007az0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:50 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:50 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: efaca471-901e-002a-6713-287a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074350Z-17c5cb586f6z6tw6g7cmdv30m800000005v0000000005a7c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:50 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e2c56d39-d01e-0066-36df-25ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074350Z-15b8d89586f8nxpt6ys645x5v000000005v0000000008212 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:50 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074350Z-16849878b78p8hrf1se7fucxk800000005gg00000000cfnp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:50 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2cfbf663-801e-0083-68dc-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074350Z-r197bdfb6b4b4pw6nr8czsrctg000000058000000000br18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:51 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b7b81bb6-b01e-0084-3bc8-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074351Z-17c5cb586f65j4snyp1hqk5z2s000000063g0000000044zh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:51 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:51 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 8d3096ad-201e-005d-6f5b-26afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074351Z-17c5cb586f6fqqst87nqkbsx1c000000037g00000000118t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:51 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:51 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:51 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074351Z-16849878b78g2m84h2v9sta29000000003kg00000000cc7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:51 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:51 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:51 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074351Z-16849878b78bcpfn2qf7sm6hsn000000069000000000acy5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:51 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:51 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:51 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 79657049-a01e-0032-1dac-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074351Z-15b8d89586fcvr6p5956n5d0rc0000000agg0000000081cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:51 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:52 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c1144745-701e-0098-7f2c-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074352Z-r197bdfb6b4mcssrvu34xzqc5400000004t0000000005ept x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:52 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:52 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4a7dd446-f01e-0096-5b9b-2710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074352Z-r197bdfb6b48pl4k4a912hk2g400000004000000000000n9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:52 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:52 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:52 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074352Z-16849878b78fhxrnedubv5byks000000033g00000000390r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:52 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:52 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:52 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074352Z-16849878b78fssff8btnns3b140000000530000000001e5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:52 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:52 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074352Z-16849878b78fkwcjkpn19c5dsn00000003r0000000009019 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:52 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:53 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:53 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ad4459d7-101e-007a-6a4c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074353Z-16849878b78zqkvcwgr6h55x9n0000000480000000002bt4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:53 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:53 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:53 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:53 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: bde7aa86-f01e-0052-08e5-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074353Z-17c5cb586f6wmhkn5q6fu8c5ss000000040g000000007322 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:53 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:53 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:53 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:53 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4814b401-401e-005b-1e73-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074353Z-17c5cb586f62blg5ss55p9d6fn000000058000000000417x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:53 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:53 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:53 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074353Z-17c5cb586f69w69mgazyf263an00000003w0000000004310 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:53 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:53 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074353Z-15b8d89586fhl2qtatrz3vfkf00000000atg000000001crx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:53 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:53 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:54 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 53c53d4f-801e-008c-1772-287130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074354Z-15b8d89586fmc8ck21zz2rtg1w0000000200000000001yfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:54 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:54 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:54 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074354Z-16849878b78wc6ln1zsrz6q9w800000004a000000000d159 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:54 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:54 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 796b115c-001e-005a-3627-26c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074354Z-17c5cb586f65j4snyp1hqk5z2s000000066g000000000h2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:54 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f9fbd553-601e-003e-5c2e-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074354Z-16849878b78fssff8btnns3b140000000520000000003c4x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:54 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dbd91de3-001e-002b-2827-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074354Z-r197bdfb6b46kdskt78qagqq1c00000004x0000000000km3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:54 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:54 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074354Z-16849878b78p8hrf1se7fucxk800000005hg00000000aqw9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:54 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:54 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: fd0e08e6-201e-0085-5f27-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074354Z-r197bdfb6b4bs5qf58wn14wgm000000003qg0000000035tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:54 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:54 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: f17b3a4e-c01e-002b-72e7-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074354Z-r197bdfb6b4qbfppwgs4nqza8000000003cg000000002ynh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:55 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:54 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:54 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: e37aa075-401e-0067-7f3f-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074354Z-r197bdfb6b46kmj4701qkq602400000003u0000000002rau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:55 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:54 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:55 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: fc120a29-401e-000a-4ff2-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074355Z-15b8d89586fwzdd8urmg0p1ebs0000000f3g000000003up2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:55 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:55 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:55 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 5a802a50-001e-0049-3f00-255bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074355Z-15b8d89586f42m673h1quuee4s00000008w00000000010pu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:55 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:55 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:55 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074355Z-16849878b78qg9mlz11wgn0wcc000000046000000000g06p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:55 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:55 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:55 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074355Z-16849878b78sx229w7g7at4nkg000000031g000000002ckd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:55 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:55 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:55 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 20ac8722-c01e-00ad-30e6-27a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074355Z-17c5cb586f626sn8grcgm1gf800000000340000000008qh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:55 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:55 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:55 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074355Z-16849878b787bfsh7zgp804my400000003f000000000a3cm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:55 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:56 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:56 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074356Z-16849878b782d4lwcu6h6gmxnw00000004fg000000001snr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:56 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:56 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:56 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:56 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 9f682ba9-701e-006f-730e-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074356Z-17c5cb586f66g7mvbfuqdb2m3n00000004vg000000002x22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:56 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:56 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:56 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:56 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: d6a45923-201e-006e-3dec-25bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074356Z-r197bdfb6b42rt68rzg9338g1g00000005x0000000003fzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:56 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:56 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:56 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:56 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1b4bca5c-501e-000a-63e3-260180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074356Z-r197bdfb6b48v72xb403uy6hns000000056g000000007w3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:56 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:56 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:56 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:56 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 44be6224-701e-0032-738d-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074356Z-r197bdfb6b46krmwag4tzr9x7c00000004g0000000004d33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:56 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:57 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:57 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074357Z-16849878b78x6gn56mgecg60qc00000006g000000000ammm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:57 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:57 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:57 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074357Z-16849878b78qfbkc5yywmsbg0c00000004dg000000005d6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:57 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:57 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:57 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 82f7a233-a01e-0002-6b65-275074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074357Z-17c5cb586f6fqqst87nqkbsx1c00000003800000000009b9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:57 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:57 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:57 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074357Z-16849878b78qfbkc5yywmsbg0c00000004e0000000004nm1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:57 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:58 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:58 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df5d8003-e01e-0099-48f7-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074358Z-17c5cb586f6w4mfs5xcmnrny6n000000065g000000008me0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:58 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:58 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:58 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 9bc6d014-801e-008f-4946-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074358Z-r197bdfb6b4hsj5bywyqk9r2xw0000000620000000008h8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:58 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:58 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:58 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: f9655ebd-a01e-0098-64f2-248556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074358Z-r197bdfb6b48pcqqxhenwd2uz800000005bg00000000b38k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:58 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:58 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:58 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074358Z-16849878b7867ttgfbpnfxt44s00000004hg000000009v1r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:58 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:58 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:58 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074358Z-15b8d89586frzkk2umu6w8qnt80000000n7g000000004d7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:58 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:59 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:59 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074359Z-16849878b78q9m8bqvwuva4svc00000003900000000059u3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:59 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:59 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:59 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074359Z-15b8d89586fqj7k5h9gbd8vs9800000005zg000000000u2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:59 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:59 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:59 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: bb99036b-d01e-007a-5c79-27f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074359Z-r197bdfb6b4hsj5bywyqk9r2xw0000000620000000008hax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 07:43:59 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:59 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:59 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 8f6ed10d-901e-008f-43da-2767a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074359Z-17c5cb586f6f8m6jnehy0z65x400000003xg000000006yea x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:59 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:43:59 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:43:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:43:59 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074359Z-16849878b78nx5sne3fztmu6xc00000005pg0000000085z7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:43:59 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:44:00 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:44:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:44:00 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ee736da1-b01e-001e-7be0-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074400Z-r197bdfb6b48pl4k4a912hk2g400000004000000000000r8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:44:00 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:44:00 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:44:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:44:00 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: fcac5f09-801e-007b-3f67-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074400Z-15b8d89586flzzks5bs37v2b900000000920000000001cdr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:44:00 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:44:00 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:44:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:44:00 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 6796a20d-a01e-00ab-565f-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074400Z-17c5cb586f6wmhkn5q6fu8c5ss0000000440000000002syd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:44:00 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:44:00 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:44:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:44:00 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074400Z-16849878b78p49s6zkwt11bbkn00000004b000000000anvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:44:00 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:44:00 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:44:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:44:00 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6ac6ea93-701e-0001-1898-25b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074400Z-15b8d89586fcvr6p5956n5d0rc0000000aqg000000000sx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:44:00 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:44:01 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:44:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:44:01 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 10294bf0-701e-0021-254d-273d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074401Z-r197bdfb6b4b4pw6nr8czsrctg00000005b0000000005mzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:44:01 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:44:01 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:44:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:44:01 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 3ac285a4-101e-0046-4580-2791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074401Z-r197bdfb6b4hsj5bywyqk9r2xw0000000620000000008hdh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:44:01 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:44:01 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:44:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:44:01 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074401Z-16849878b78sx229w7g7at4nkg00000003200000000017p5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:44:01 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 07:44:01 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 07:44:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 07:44:01 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T074401Z-16849878b78j7llf5vkyvvcehs00000005t000000000908q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 07:44:01 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2724, Parent PID: 5732

General

Target ID:	0
Start time:	03:43:19
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6184, Parent PID: 2724

General

Target ID:	2
Start time:	03:43:22
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2536,i,13991932582242262374,1432239214346613975,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5776, Parent PID: 5732

General

Target ID:	3
Start time:	03:43:24
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Connections

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2724, Parent PID: 5732

General

Chronological Activities

Analysis Process: chrome.exePID: 6184, Parent PID: 2724

Windows Analysis Report
https://click.sleadtrack.com/link?messageId=%3C8227ea57-e0dc-sl97-4826-98af-00679a8c68a7@ogreai.net%3E&url=%20https://ogre.ai/en