Edit tour

Windows Analysis Report
https://u47860934.ct.sendgrid.net/asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenz

Overview

General Information

Sample URL:	https://u47860934.ct.sendgrid.net/asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2n
Analysis ID:	1544732
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2220,i,4729958559204312130,14849540772647102609,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u47860934.ct.sendgrid.net/asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6IU7pxd4NWW3CuMsgAnxRkiNNBrLpChQX4iBmWmSpD1zK3OOBWMm9wyxUVvX05DFTJ-l_VbX17LP50_W9HgB-yL4aC0RaD6JbPJdn0OheLwu0A=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /asm/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6IU7pxd4NWW3CuMsgAnxRkiNNBrLpChQX4iBmWmSpD1zK3OOBWMm9wyxUVvX05DFTJ-l_VbX17LP50_W9HgB-yL4aC0RaD6JbPJdn0OheLwu0A= HTTP/1.1Host: u47860934.ct.sendgrid.netConnection: keep-aliveContent-Length: 11Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: nullContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 29 Oct 2024 15:58:50 GMTContent-Type: text/htmlContent-Length: 564Connection: close

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.64:443 -> 192.168.2.4:49759 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/20@6/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2220,i,4729958559204312130,14849540772647102609,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u47860934.ct.sendgrid.net/asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6IU7pxd4NWW3CuMsgAnxRkiNNBrLpChQX4iBmWmSpD1zK3OOBWMm9wyxUVvX05DFTJ-l_VbX17LP50_W9HgB-yL4aC0RaD6JbPJdn0OheLwu0A="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2220,i,4729958559204312130,14849540772647102609,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
s-part-0036.t-0009.fb-t-msedge.net	13.107.253.64	true	false	unknown
u47860934.ct.sendgrid.net	167.89.115.147	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://u47860934.ct.sendgrid.net/asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6IU7pxd4NWW3CuMsgAnxRkiNNBrLpChQX4iBmWmSpD1zK3OOBWMm9wyxUVvX05DFTJ-l_VbX17LP50_W9HgB-yL4aC0RaD6JbPJdn0OheLwu0A=	false	unknown
https://u47860934.ct.sendgrid.net/asm/assets/images/success.png	false	unknown
https://u47860934.ct.sendgrid.net/asm/assets/stylesheets/app.css	false	unknown
https://u47860934.ct.sendgrid.net/asm/assets/fonts/colfax-regular.woff2	false	unknown
https://u47860934.ct.sendgrid.net/asm/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6IU7pxd4NWW3CuMsgAnxRkiNNBrLpChQX4iBmWmSpD1zK3OOBWMm9wyxUVvX05DFTJ-l_VbX17LP50_W9HgB-yL4aC0RaD6JbPJdn0OheLwu0A=	false	unknown
https://u47860934.ct.sendgrid.net/asm/assets/fonts/colfax-medium.woff2	false	unknown
https://u47860934.ct.sendgrid.net/asm/assets/javascripts/app.js	false	unknown
https://u47860934.ct.sendgrid.net/favicon.ico	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
167.89.115.147	u47860934.ct.sendgrid.net	United States	11377	SENDGRIDUS	false
167.89.115.58	unknown	United States	11377	SENDGRIDUS	false

Private

IP
192.168.2.13
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544732
Start date and time:	2024-10-29 16:57:48 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://u47860934.ct.sendgrid.net/asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6IU7pxd4NWW3CuMsgAnxRkiNNBrLpChQX4iBmWmSpD1zK3OOBWMm9wyxUVvX05DFTJ-l_VbX17LP50_W9HgB-yL4aC0RaD6JbPJdn0OheLwu0A=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/20@6/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.186.78, 173.194.76.84, 34.104.35.123, 20.12.23.50, 93.184.221.240, 192.229.221.95, 52.165.164.15, 13.85.23.206, 142.250.186.131
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://u47860934.ct.sendgrid.net/asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_r

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20276, version 1.0
Category:	downloaded
Size (bytes):	20276
Entropy (8bit):	7.988573704878386
Encrypted:	false
SSDEEP:	384:irNvjI8hiz4Ex65AGFmyBdvuzbAyxye+4qYJHqamoC1N7eoOekMCvYkOtyoG47LK:ixrI8hiUXNmyBdvuz0yxylKKa7C1dUnN
MD5:	A96521D6C4E5754F7A68BB01C5FAB982
SHA1:	5E638875E070DBFA1E0A4D383A5F8F359D0DD88E
SHA-256:	8CA9955F0A912F58EB433089574D8B393E1436C4A5E36E74B8C2010AD77C5822
SHA-512:	5C067990ADAFAF4039EB25F1EA670D7B565A283AEC939A57790727EEF31B2628FA5C5AD9C5C2CD1FC55563ABBDE25C66FCE4A15E4268C3595DE5352AF7F988A8
Malicious:	false
Reputation:	low
URL:	https://u47860934.ct.sendgrid.net/asm/assets/fonts/colfax-medium.woff2
Preview:	wOF2......O4.......t..N.........................?FFTM......<..R.`...........X..D..6.$.... .....f...W.......;..#TL.y..0'N..0............LK.A... "..h..23W..j..G...=.....u.L{.................k7.....i..l.4\|v..N......y.:....h.k.q...F..{.(y..V;.C/..T....NA._,T.z..Q.p<Q.<je..f^.).....rW....0v=D.X.^..Z...W.5.8........Q.%P..Q..........{..0QJAD.Z,0.0@B......:.6...:.v.......o......J....yCQ.dA...?....>B.aBy.........H.......J.y..k...(....;...q.......7,...[_\|..b.e.5i............t..hC.eX.ys..q...'%.2..$..._...fM..K.-....m....:..vo+....9.C...3....Q.!m..@..(......'.X.y/m.&L3.m..Nl.CE./......\....6.RA...Mv..(.;...c...k.......+.T......QiiTR...*.}.C....iZ_......&T.......iI...i=.T..H."/.....aK..c.n.e.m...@..N...Yo.L.3....l...I.=....8..M.2..8p7..9.l..t.;(...=+...%PD.7..&..%......c.{I&M...FE..._!......R.\...7....I..[..,..C.5..~.?.>.7..........`.Rj.@....8{....<.r..H...hC/......4...E..o.....C...y........{;..M....0y........3.w.....s~o.%..W......NZ.<..Y...

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2199
Entropy (8bit):	7.912311133040857
Encrypted:	false
SSDEEP:	48:vs73fvAa54j9zd3SZjxiaJbT0gvF0xGFIyAaq6gMbKIM5:E7fp25dibf30dxGFIjaqZ
MD5:	8D08B9CB4FBA399858A82EC24021797E
SHA1:	2E19653DECE0B0791E623BE2D2A6FEA2C15FDA3E
SHA-256:	C02910B5F8ADB0CE14204561F493E0C1BCDA41D7F4BD41EB300E9D92BA1D2B52
SHA-512:	39F0FDB8C3E404475F5D764597EBA31382C096447528992795DDAFDFCDCACCFE7CBBA956651BDEC2221549AA07BE66F8CB7C44EFE2265ECD5B5240833EA02EAA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...8.......;....^IDATh..[kl.E........BP.CBHP\|..R.P.>.+ ...(Fc.G...bM.Q.m.Dc.......PZ"jj4R.R.("&..........\|s.....{.....I..gf.\|...3g.r..+..,.g..)._........L.J.T%..w2.:.g.L.CT>$U.....m...).A.lY.z*.U0....L.q%...d.E.`K...S..JOIz.N\|0.'?Q=v..W>.x..>..;..o........cC.R..D..p....yJ...ua..'.'..g.\|s..R....kx.....B.K..,S#).A.O.}..LL..57..yO.....$.R.]R.O....=.Oz....o.06.bV.9,=..\|.W....I<.....H.nO.g..Jd....\|...............w.w..Su~.C......32w.[.+o..y1gl!..W;....N.......o\.P^.....SR..f2"W...d.8...TW}{..G.R.U....yz-......^d......}U...hm^R. ....4.y....M./T..jw.....+.[..l...i./pi....lp..B$c.bZN.3....$i..R.Z.).......u.yk...n..........P...o.INI2....E.xrce...F....F..0.2..$...Q.B......Z.y..d8...c..=...0.r<G.(.9OT........d...sU.C.....}..5..d...:....C."nvBY.sJ.=..Ec ,9;.I..vp.KX.....CQ...&P....&S.2...).p......o...u....N..\.....B..?...:.}St..W=.!G.8..B...l..0+...\ze. .s..O..t.<..Z.#c. ......\..r..b.J..D.!\|K._.l8..{p..Wl..s.S.CJ..z.

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10625
Entropy (8bit):	4.986524046483435
Encrypted:	false
SSDEEP:	192:x79X7z39mlCAoF8+Y8BnRQieESndHhWOCv6OT3ud:37dFDjBnKQ76yed
MD5:	5730595620EC340577A565963D05313C
SHA1:	01B93D64E660B59044DD8613B3FB08586FC9B9EA
SHA-256:	8724E91FF618A26C1D24801B83D56048CC2FE1D7DF70B2D0CEA62BE77CD42BCB
SHA-512:	F88B2F0A9FF3962D6268CB89AF9D70F05809A2C7019333F2CBE8691F9A96985D9454A7010CDF6FD25B2D78D4F2CEFD61501D05BB899D4E81BB348C9FD17F5533
Malicious:	false
Reputation:	low
URL:	https://u47860934.ct.sendgrid.net/asm/assets/stylesheets/app.css
Preview:	/* Global styles */..@font-face {. font-family: "Colfax";. font-style: normal;. font-weight: 300;. src: url("/asm/assets/fonts/colfax-light.woff2") format("woff2"),. url("/asm/assets/fonts/colfax-light.woff") format("woff");.}..@font-face {. font-family: "Colfax";. font-style: normal;. font-weight: 400;. src: url("/asm/assets/fonts/colfax-regular.woff2") format("woff2"),. url("/asm/assets/fonts/colfax-regular.woff") format("woff");.}..@font-face {. font-family: "Colfax";. font-style: normal;. font-weight: 600;. src: url("/asm/assets/fonts/colfax-medium.woff2") format("woff2"),. url("/asm/assets/fonts/colfax-medium.woff") format("woff");.}..html, body {. font-family: Colfax, Helvetica, sans-serif;. background: #F7F7F7;. margin: 0;. padding: 10px;. text-align: center;.}...avatar img {. border-radius: 100%;. margin-top: 43px;.}...email {. color: #7C7C7C;. font-family: Colfax, Helvetica, sans-serif;. font-size: 22px;. line-height: 26px;. margin-top

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2199
Entropy (8bit):	7.912311133040857
Encrypted:	false
SSDEEP:	48:vs73fvAa54j9zd3SZjxiaJbT0gvF0xGFIyAaq6gMbKIM5:E7fp25dibf30dxGFIjaqZ
MD5:	8D08B9CB4FBA399858A82EC24021797E
SHA1:	2E19653DECE0B0791E623BE2D2A6FEA2C15FDA3E
SHA-256:	C02910B5F8ADB0CE14204561F493E0C1BCDA41D7F4BD41EB300E9D92BA1D2B52
SHA-512:	39F0FDB8C3E404475F5D764597EBA31382C096447528992795DDAFDFCDCACCFE7CBBA956651BDEC2221549AA07BE66F8CB7C44EFE2265ECD5B5240833EA02EAA
Malicious:	false
Reputation:	low
URL:	https://u47860934.ct.sendgrid.net/asm/assets/images/success.png
Preview:	.PNG........IHDR...8...8.......;....^IDATh..[kl.E........BP.CBHP\|..R.P.>.+ ...(Fc.G...bM.Q.m.Dc.......PZ"jj4R.R.("&..........\|s.....{.....I..gf.\|...3g.r..+..,.g..)._........L.J.T%..w2.:.g.L.CT>$U.....m...).A.lY.z*.U0....L.q%...d.E.`K...S..JOIz.N\|0.'?Q=v..W>.x..>..;..o........cC.R..D..p....yJ...ua..'.'..g.\|s..R....kx.....B.K..,S#).A.O.}..LL..57..yO.....$.R.]R.O....=.Oz....o.06.bV.9,=..\|.W....I<.....H.nO.g..Jd....\|...............w.w..Su~.C......32w.[.+o..y1gl!..W;....N.......o\.P^.....SR..f2"W...d.8...TW}{..G.R.U....yz-......^d......}U...hm^R. ....4.y....M./T..jw.....+.[..l...i./pi....lp..B$c.bZN.3....$i..R.Z.).......u.yk...n..........P...o.INI2....E.xrce...F....F..0.2..$...Q.B......Z.y..d8...c..=...0.r<G.(.9OT........d...sU.C.....}..5..d...:....C."nvBY.sJ.=..Ec ,9;.I..vp.KX.....CQ...&P....&S.2...).p......o...u....N..\.....B..?...:.}St..W=.!G.8..B...l..0+...\ze. .s..O..t.<..Z.#c. ......\..r..b.J..D.!\|K._.l8..{p..Wl..s.S.CJ..z.

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	635
Entropy (8bit):	4.733145490196505
Encrypted:	false
SSDEEP:	12:goJY7Qx8/9odADTQiNXgclTngbbr2Zg/5tVTdcini315n317/nE+D:gUpgwADTjXlWbbaZ6fGfFPE+D
MD5:	5AF5B07DD04E8895B505BA19B26F75B8
SHA1:	B69996E419069CA8AC12F807CD98A6BBF8D7C56D
SHA-256:	5EE606658E7731A3F2F34EA873CC6A083CAC6B5A938257BF2FB6FC2D600F1451
SHA-512:	5F681AF95A6E083EEFD5D968B0C01D5A22B1F7A922A6FAB4B0461FC37DADEA12416C718A820A27AC830C30CC612E9AEC6B313978516C26695958118B1D6BA330
Malicious:	false
Reputation:	low
URL:	https://u47860934.ct.sendgrid.net/asm/assets/javascripts/app.js
Preview:	window.addEventListener('load', function() {. document.querySelectorAll('.btn-toggle').forEach(function (el) {. el.addEventListener('click', function (evt) {. // Toggle visual state. el.classList.toggle('btn-toggle-onstate'). el.classList.toggle('btn-toggle-offstate'). el.querySelectorAll('.btn-toggle-option').forEach(function (o) { o.classList.toggle('btn-toggle-active') }).. // Toggle hidden checkbox state. var $checkbox = el.querySelector('input[type=checkbox]'). var state = !$checkbox.checked. $checkbox.checked = state. $checkbox.setAttribute('checked', state). }). }).}).

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	635
Entropy (8bit):	4.733145490196505
Encrypted:	false
SSDEEP:	12:goJY7Qx8/9odADTQiNXgclTngbbr2Zg/5tVTdcini315n317/nE+D:gUpgwADTjXlWbbaZ6fGfFPE+D
MD5:	5AF5B07DD04E8895B505BA19B26F75B8
SHA1:	B69996E419069CA8AC12F807CD98A6BBF8D7C56D
SHA-256:	5EE606658E7731A3F2F34EA873CC6A083CAC6B5A938257BF2FB6FC2D600F1451
SHA-512:	5F681AF95A6E083EEFD5D968B0C01D5A22B1F7A922A6FAB4B0461FC37DADEA12416C718A820A27AC830C30CC612E9AEC6B313978516C26695958118B1D6BA330
Malicious:	false
Reputation:	low
Preview:	window.addEventListener('load', function() {. document.querySelectorAll('.btn-toggle').forEach(function (el) {. el.addEventListener('click', function (evt) {. // Toggle visual state. el.classList.toggle('btn-toggle-onstate'). el.classList.toggle('btn-toggle-offstate'). el.querySelectorAll('.btn-toggle-option').forEach(function (o) { o.classList.toggle('btn-toggle-active') }).. // Toggle hidden checkbox state. var $checkbox = el.querySelector('input[type=checkbox]'). var state = !$checkbox.checked. $checkbox.checked = state. $checkbox.setAttribute('checked', state). }). }).}).

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1166)
Category:	downloaded
Size (bytes):	2053
Entropy (8bit):	5.896931517946681
Encrypted:	false
SSDEEP:	24:B8/UHIY4Z7EkNwCWxE/U1vTPrPo0X1ytdlbZ6tGtcUoN4JBsqGod/HQXt7DwaBW0:WZ71NG6/U1r7o0EdlbZ6thQU2H8nWwyA
MD5:	110F7830CFACA37FC31296F2F7CA3A16
SHA1:	23FEDCF292197E259B73F93E91BAF667F674C3C1
SHA-256:	674B0570B5A80240F85253B0E3B9899B5C9B39C20024B6E1FD8098EF27A0FA37
SHA-512:	8983927FE4A06C66AFFF586DFA3652B0EC0323F33365A9E9DC052A395DB212C38DEBC0D7688DD26AFA42AC64E1D84873FA23E19A729726BA4E3DC52C3AC672F2
Malicious:	false
Reputation:	low
URL:	https://u47860934.ct.sendgrid.net/asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6IU7pxd4NWW3CuMsgAnxRkiNNBrLpChQX4iBmWmSpD1zK3OOBWMm9wyxUVvX05DFTJ-l_VbX17LP50_W9HgB-yL4aC0RaD6JbPJdn0OheLwu0A=
Preview:	. <!DOCTYPE html>. <html>. . <head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <title>Unsubscribe Preferences</title>. <meta name="viewport" content="width=device-width, initial-scale=1">. <link rel="stylesheet" href="/asm/assets/stylesheets/app.css">. </head>.. <body>. <h2 class="email">f***e@c***v.org</h2>. . . <main class="opt-out-success">. <form action="/asm/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-Xrw

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20388, version 1.0
Category:	downloaded
Size (bytes):	20388
Entropy (8bit):	7.98944732403578
Encrypted:	false
SSDEEP:	384:88H/0VET58pbgXPKeyxipgpniDZfAsQ0QGCfM9bvKx9p3p6JSCPE3zUJsU2BL:88HcyTipAnKipEOAOVCfebKNRQJsUY
MD5:	05F3D250BD4E9882C917D9425A791FD6
SHA1:	010CD8F53073404D1BBC15BE10A92E9B1BEFEE69
SHA-256:	7B8E8C1059E7CFCCF6677325AF221B29713D6F4F2D231F3B2D8AC31B3E001A71
SHA-512:	18EEC0B26587ABC2928E23DC7EDB08FB4A814236796AFAD2AC9A18D6DFF28B9841489BDFA489070302ED0A6232CD35606A6DCDC4494244913B592F5D56FF6D90
Malicious:	false
Reputation:	low
URL:	https://u47860934.ct.sendgrid.net/asm/assets/fonts/colfax-regular.woff2
Preview:	wOF2......O..........OD........................?FFTM......L..R.`........\|.....D..6.$.... .....f.....kl..2,.t....k.y#....H.RO....y....Y.....^R.C......s..V........n.9...,S.VS....^.L@....H..L...e.R..&z...\."..N.ln...!......O......u.M..W.3..6..N..T...cJ.v..C...... .JT.B....D..v..&...JT.d./..JM..l\|.1........5.c..N\|.....d....#....uV..V.L...........9..u.9..:;..w.C.8.ej.9.V..#'.lW...X..A..rlN.d...<.....'I..K..D..+.1o.x..0C.[M.'..J...Bh!$..7.JJ#...BS...V".J.cG=<,..=.?.D..u.....Y.~..8u...T...R:..&..=T.Tk.5..).Q......8........OE{$N!.g.-K....+>2....8p.(.u.. .-....a...]T.\...F..S.^.ws...1j.. ^e...'...k...[j.~...U...D~.}..Vu..{U.?...40Ag.N\ .!..8.......6.$......W.......Y.v&......\|+NM_...s.tfKP.c/.A...>._..iz.J`()ZU..f.E.)'.^s......7.B.0B......g...U.*5..Y...B..h..S.~...N...%.i............5.;.s...).....!.!.]..7.kn.!....ZX2L,.@..v....?g..qC..y.Y.u.-.@7.6...;..V.'...I...TD...3...g,v$..+...Z.......dy$..$.b.{.A0.. t.....yW_{E.................].yT....;7,...3A._..y.O..kk

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1172)
Category:	downloaded
Size (bytes):	4773
Entropy (8bit):	5.567080117498673
Encrypted:	false
SSDEEP:	48:WZ77NJTIeyHx/U1r7o0EdlbZ6thQU2H8Fuf/U1r7o0EdlbZ6thQU2H8H9P3kRNCA:kA5Hx/UrW3bazuf/UrW3bavA
MD5:	F53918EECBD81108D743D12EA8B12E26
SHA1:	AC8127C6F39358B29C2A6928BA626E9D0F7B0CB0
SHA-256:	7F226F5135BB0DF6430B181FBBD2B4D283FD0FD664276B05148EE6F56879E3B8
SHA-512:	D2A97FCD9B3416D195A01F46CA5D9FC4494CAD43AD6ADF7576EA067B0319123B5BA295BEE0349741C849AB9B3CD922B127C69EE868DDE2FB5A5A055DFC81F884
Malicious:	false
Reputation:	low
URL:	https://u47860934.ct.sendgrid.net/asm/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6IU7pxd4NWW3CuMsgAnxRkiNNBrLpChQX4iBmWmSpD1zK3OOBWMm9wyxUVvX05DFTJ-l_VbX17LP50_W9HgB-yL4aC0RaD6JbPJdn0OheLwu0A=
Preview:	. <!DOCTYPE html>. <html>. . <head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <title>Unsubscribe Preferences</title>. <meta name="viewport" content="width=device-width, initial-scale=1">. <link rel="stylesheet" href="/asm/assets/stylesheets/app.css">. </head>.. <body>. . <h2 class="email">f***e@c***v.org</h2>. . . <h1 class="animated emailhead">Opt-Out Preferences Updated!</h1>. . <h3 class="subheader">. You can choose to opt out of any of the following<br/>. types of email communications we send.. </h3>. <main class="display-preferences">. <form action="/asm/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcb

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1172)
Category:	downloaded
Size (bytes):	4773
Entropy (8bit):	5.567080117498673
Encrypted:	false
SSDEEP:	48:WZ77NJTIeyHx/U1r7o0EdlbZ6thQU2H8Fuf/U1r7o0EdlbZ6thQU2H8H9P3kRNCA:kA5Hx/UrW3bazuf/UrW3bavA
MD5:	F53918EECBD81108D743D12EA8B12E26
SHA1:	AC8127C6F39358B29C2A6928BA626E9D0F7B0CB0
SHA-256:	7F226F5135BB0DF6430B181FBBD2B4D283FD0FD664276B05148EE6F56879E3B8
SHA-512:	D2A97FCD9B3416D195A01F46CA5D9FC4494CAD43AD6ADF7576EA067B0319123B5BA295BEE0349741C849AB9B3CD922B127C69EE868DDE2FB5A5A055DFC81F884
Malicious:	false
Reputation:	low
URL:	https://u47860934.ct.sendgrid.net/asm/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6IU7pxd4NWW3CuMsgAnxRkiNNBrLpChQX4iBmWmSpD1zK3OOBWMm9wyxUVvX05DFTJ-l_VbX17LP50_W9HgB-yL4aC0RaD6JbPJdn0OheLwu0A=
Preview:	. <!DOCTYPE html>. <html>. . <head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <title>Unsubscribe Preferences</title>. <meta name="viewport" content="width=device-width, initial-scale=1">. <link rel="stylesheet" href="/asm/assets/stylesheets/app.css">. </head>.. <body>. . <h2 class="email">f***e@c***v.org</h2>. . . <h1 class="animated emailhead">Opt-Out Preferences Updated!</h1>. . <h3 class="subheader">. You can choose to opt out of any of the following<br/>. types of email communications we send.. </h3>. <main class="display-preferences">. <form action="/asm/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcb

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	564
Entropy (8bit):	4.72971822420855
Encrypted:	false
SSDEEP:	12:TjeRHdHiHZdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH988DTPTPTPTPTPTc
MD5:	8E325DC2FEA7C8900FC6C4B8C6C394FE
SHA1:	1B3291D4EEA179C84145B2814CB53E6A506EC201
SHA-256:	0B52C5338AF355699530A47683420E48C7344E779D3E815FF9943CBFDC153CF2
SHA-512:	084C608F1F860FB08EF03B155658EA9988B3628D3C0F0E9561FDFF930E5912004CDDBCC43B1FA90C21FE7F5A481AC47C64B8CAA066C2BDF3CF533E152BF96C14
Malicious:	false
Reputation:	low
URL:	https://u47860934.ct.sendgrid.net/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body bgcolor="white">..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 16:58:42.818947077 CET	49675	443	192.168.2.4	173.222.162.32
Oct 29, 2024 16:58:46.878257990 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:46.878299952 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:46.878369093 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:46.878606081 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:46.878618002 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:46.878983974 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:46.879050016 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:46.879111052 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:46.879295111 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:46.879327059 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.717863083 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.739300966 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.760188103 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.780841112 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.801935911 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.801960945 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.802242994 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.802263021 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.803396940 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.803478956 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.803709030 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.803776979 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.810997009 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.811067104 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.811167002 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.811376095 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.811429024 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.811435938 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.851536989 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.851567984 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:47.858328104 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:47.898976088 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.007114887 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.007178068 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.007282019 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.007342100 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.007374048 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.007441044 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.059709072 CET	49735	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.059806108 CET	443	49735	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.094882011 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.095863104 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.095906973 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.095990896 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.096426964 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.096443892 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.096903086 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.096961021 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.097047091 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.097306967 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.097326994 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.139342070 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.257428885 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.257469893 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.257479906 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.257494926 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.257503986 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.257579088 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.257580042 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.257592916 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.257659912 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.263977051 CET	49736	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.264019012 CET	443	49736	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.307713985 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.307765007 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.307837009 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.308453083 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.308506012 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.308573008 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.308847904 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.308859110 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:48.309139967 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:48.309154987 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.098623037 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.099035025 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.099055052 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.099572897 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.099833012 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.099859953 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.100272894 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.100769043 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.100928068 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.100943089 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.101047039 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.101375103 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.101473093 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.101481915 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.101567030 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.144083023 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.144087076 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.144134998 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.520992994 CET	49743	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:58:49.521028042 CET	443	49743	142.250.184.196	192.168.2.4
Oct 29, 2024 16:58:49.521090984 CET	49743	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:58:49.521616936 CET	49743	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:58:49.521626949 CET	443	49743	142.250.184.196	192.168.2.4
Oct 29, 2024 16:58:49.538223982 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.539134979 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.539172888 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.539762974 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.540676117 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.540777922 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.540783882 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.540806055 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.541569948 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.541676044 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.542326927 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.542361021 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.542653084 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.543692112 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.543801069 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.543998003 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.583329916 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.585524082 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.585525036 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.585536003 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.585537910 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.631217957 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.631664991 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.647214890 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.647242069 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.647252083 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.647264957 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.647293091 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.647432089 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.647456884 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.647589922 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.647669077 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.647700071 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.647994995 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.651556969 CET	49739	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.651576996 CET	443	49739	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.660212994 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.660278082 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.660298109 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.660336971 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.660353899 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.660378933 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.660392046 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.660404921 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.660404921 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.660453081 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.660486937 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.660501957 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.660535097 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.660643101 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.660670042 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.660758018 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.703646898 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.703754902 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.704531908 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.709600925 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.709631920 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.709700108 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.709726095 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.709738970 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.709806919 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.723053932 CET	49740	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.723088026 CET	443	49740	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.768930912 CET	49742	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.768970013 CET	443	49742	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.785542011 CET	49741	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.785566092 CET	443	49741	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.823463917 CET	49744	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.823515892 CET	443	49744	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:49.823601007 CET	49744	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.823821068 CET	49744	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:49.823837042 CET	443	49744	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:50.396665096 CET	443	49743	142.250.184.196	192.168.2.4
Oct 29, 2024 16:58:50.402246952 CET	49743	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:58:50.402282000 CET	443	49743	142.250.184.196	192.168.2.4
Oct 29, 2024 16:58:50.403526068 CET	443	49743	142.250.184.196	192.168.2.4
Oct 29, 2024 16:58:50.403604031 CET	49743	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:58:50.404812098 CET	49743	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:58:50.404891968 CET	443	49743	142.250.184.196	192.168.2.4
Oct 29, 2024 16:58:50.431101084 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:50.431148052 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:50.431332111 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:50.431672096 CET	49746	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:50.431674957 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:50.431694984 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:50.431699038 CET	443	49746	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:50.431952953 CET	49746	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:50.431952953 CET	49746	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:50.431981087 CET	443	49746	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:50.458791971 CET	49743	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:58:50.458827019 CET	443	49743	142.250.184.196	192.168.2.4
Oct 29, 2024 16:58:50.508352041 CET	49743	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:58:50.571397066 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:50.571443081 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:50.571507931 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:50.575918913 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:50.575932026 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:50.656518936 CET	443	49744	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:50.658937931 CET	49744	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:50.658977985 CET	443	49744	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:50.660208941 CET	443	49744	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:50.660682917 CET	49744	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:50.660902023 CET	443	49744	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:50.660933018 CET	49744	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:50.703336000 CET	443	49744	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:50.708745003 CET	49744	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:50.817488909 CET	443	49744	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:50.817581892 CET	443	49744	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:50.817639112 CET	49744	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:50.822482109 CET	49744	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:58:50.822506905 CET	443	49744	167.89.115.147	192.168.2.4
Oct 29, 2024 16:58:51.421468973 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.424515963 CET	443	49746	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.436109066 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.436125040 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.436336040 CET	49746	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.436371088 CET	443	49746	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.437948942 CET	443	49746	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.438014984 CET	49746	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.438822031 CET	49746	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.438914061 CET	443	49746	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.439965963 CET	49746	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.439975977 CET	443	49746	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.439994097 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.440058947 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.440135956 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:51.440207005 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:51.440833092 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.441008091 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.441133022 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.441138983 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.450578928 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:51.450603962 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:51.451034069 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:51.489990950 CET	49746	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.490047932 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.505620956 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:51.599140882 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.599173069 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.599217892 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.599229097 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.599263906 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.599622965 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.606355906 CET	443	49746	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.606456995 CET	443	49746	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.606504917 CET	49746	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.673089981 CET	49745	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.673119068 CET	443	49745	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.679339886 CET	49746	443	192.168.2.4	167.89.115.58
Oct 29, 2024 16:58:51.679373026 CET	443	49746	167.89.115.58	192.168.2.4
Oct 29, 2024 16:58:51.722484112 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:51.763369083 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:51.967832088 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:51.968035936 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:51.968060970 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:51.968122959 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:51.968142033 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:51.968142033 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:51.968153000 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:51.968162060 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:52.024842024 CET	49748	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:52.024894953 CET	443	49748	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:52.024982929 CET	49748	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:52.025458097 CET	49748	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:52.025471926 CET	443	49748	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:52.874104977 CET	443	49748	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:52.874234915 CET	49748	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:52.875710011 CET	49748	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:52.875720024 CET	443	49748	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:52.876121998 CET	443	49748	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:52.877121925 CET	49748	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:52.919377089 CET	443	49748	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:53.143744946 CET	443	49748	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:53.143913031 CET	443	49748	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:53.144169092 CET	49748	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:53.144723892 CET	49748	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:53.144746065 CET	443	49748	184.28.90.27	192.168.2.4
Oct 29, 2024 16:58:53.144758940 CET	49748	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:58:53.144764900 CET	443	49748	184.28.90.27	192.168.2.4
Oct 29, 2024 16:59:00.401262045 CET	443	49743	142.250.184.196	192.168.2.4
Oct 29, 2024 16:59:00.401452065 CET	443	49743	142.250.184.196	192.168.2.4
Oct 29, 2024 16:59:00.401501894 CET	49743	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:59:00.645376921 CET	80	49723	84.201.210.18	192.168.2.4
Oct 29, 2024 16:59:00.645502090 CET	49723	80	192.168.2.4	84.201.210.18
Oct 29, 2024 16:59:00.645564079 CET	49723	80	192.168.2.4	84.201.210.18
Oct 29, 2024 16:59:00.651024103 CET	80	49723	84.201.210.18	192.168.2.4
Oct 29, 2024 16:59:01.757566929 CET	49743	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:59:01.757596016 CET	443	49743	142.250.184.196	192.168.2.4
Oct 29, 2024 16:59:07.287560940 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:07.287611961 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:07.288589954 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:07.288638115 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:07.288639069 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:07.289973974 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:07.289992094 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:07.290026903 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:07.292433977 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:07.292452097 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.118596077 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.118876934 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:08.118911028 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.119649887 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.120004892 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:08.120174885 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:08.120203018 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.120233059 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:08.131092072 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.131455898 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:08.131484032 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.131985903 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.132503986 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:08.132601976 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.159535885 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:08.163376093 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.175024986 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:08.450396061 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.450419903 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.450483084 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:08.450525045 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.456502914 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:08.456562042 CET	443	49755	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:08.456706047 CET	49755	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:14.763334036 CET	80	49724	84.201.210.18	192.168.2.4
Oct 29, 2024 16:59:14.763434887 CET	49724	80	192.168.2.4	84.201.210.18
Oct 29, 2024 16:59:14.763503075 CET	49724	80	192.168.2.4	84.201.210.18
Oct 29, 2024 16:59:14.770332098 CET	80	49724	84.201.210.18	192.168.2.4
Oct 29, 2024 16:59:28.141810894 CET	49757	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:28.141866922 CET	443	49757	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:28.141977072 CET	49757	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:28.143407106 CET	49757	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:28.143421888 CET	443	49757	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:28.143929958 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:28.144032001 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:28.144063950 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:28.355705976 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:28.355731964 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:28.355792046 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:28.355850935 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:28.357153893 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:28.357211113 CET	443	49756	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:28.357271910 CET	49756	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:29.050632954 CET	443	49757	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:29.097716093 CET	49757	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:29.132548094 CET	49757	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:29.132567883 CET	443	49757	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:29.133886099 CET	443	49757	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:29.133944988 CET	49757	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:29.134512901 CET	49757	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:29.134579897 CET	443	49757	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:29.192722082 CET	49757	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:29.192743063 CET	443	49757	167.89.115.147	192.168.2.4
Oct 29, 2024 16:59:29.239583015 CET	49757	443	192.168.2.4	167.89.115.147
Oct 29, 2024 16:59:39.522376060 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:39.522427082 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:39.522520065 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:39.523041010 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:39.523057938 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.280608892 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.280677080 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.350338936 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.350379944 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.351439953 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.360639095 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.403331995 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.608067036 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.608102083 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.608156919 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.608191013 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.608211040 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.608244896 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.608280897 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.723736048 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.723793983 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.723824024 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.723854065 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.723879099 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.723902941 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.839029074 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.839077950 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.839117050 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.839132071 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.839152098 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.839165926 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.954732895 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.954797983 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.954822063 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.954834938 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:40.954864025 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:40.954878092 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.070431948 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.070473909 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.070523977 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.070544004 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.070559025 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.070581913 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.186562061 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.186611891 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.186633110 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.186662912 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.186678886 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.186702967 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.304166079 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.304238081 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.304244995 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.304269075 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.304296970 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.304325104 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.340847015 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.340889931 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.340933084 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.340989113 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.341037989 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.341130018 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.435820103 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.435849905 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.435902119 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.435921907 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.435935020 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.435960054 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.551038980 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.551084995 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.551141024 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.551166058 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.551197052 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.551209927 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.650685072 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.650711060 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.650763035 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.650789022 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.650804043 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.650830984 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.668288946 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.668318987 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.668410063 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.668426991 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.668441057 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.668473005 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.783607960 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.783651114 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.783718109 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.783754110 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.783771992 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.783870935 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.784024000 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.784090996 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.784099102 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.784130096 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.784178972 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.784202099 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.784220934 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.784229994 CET	49759	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.784235954 CET	443	49759	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.829977036 CET	49760	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.830045938 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.830112934 CET	49760	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.831978083 CET	49761	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.832040071 CET	443	49761	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.832248926 CET	49761	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.832470894 CET	49760	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.832494974 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.833089113 CET	49762	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.833105087 CET	443	49762	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.833256006 CET	49762	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.833437920 CET	49762	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.833447933 CET	443	49762	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.834526062 CET	49763	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.834537029 CET	443	49763	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.834665060 CET	49761	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.834681988 CET	443	49761	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.834705114 CET	49763	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.834759951 CET	49763	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.834772110 CET	443	49763	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.835539103 CET	49764	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.835592031 CET	443	49764	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:41.835642099 CET	49764	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.835948944 CET	49764	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:41.835963011 CET	443	49764	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.598447084 CET	443	49763	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.598987103 CET	49763	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.599062920 CET	443	49763	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.599452972 CET	49763	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.599469900 CET	443	49763	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.600856066 CET	443	49761	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.600924969 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.601309061 CET	49760	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.601324081 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.601438999 CET	49761	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.601455927 CET	443	49761	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.601852894 CET	49760	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.601860046 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.602024078 CET	49761	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.602035999 CET	443	49761	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.605638027 CET	443	49764	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.605935097 CET	49764	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.605952978 CET	443	49764	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.606348991 CET	49764	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.606353998 CET	443	49764	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.625292063 CET	443	49762	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.625672102 CET	49762	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.625685930 CET	443	49762	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.626094103 CET	49762	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.626101017 CET	443	49762	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.735363007 CET	443	49763	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.735385895 CET	443	49763	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.735440969 CET	443	49763	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.735440016 CET	49763	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.735486031 CET	49763	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.735708952 CET	49763	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.735732079 CET	443	49763	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.735745907 CET	49763	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.735754013 CET	443	49763	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.738028049 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.738112926 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.738140106 CET	443	49761	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.738173962 CET	49760	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.738195896 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.738300085 CET	49760	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.738307953 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.738329887 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.738399982 CET	49760	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.738437891 CET	49760	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.738456964 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.738470078 CET	49760	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.738476992 CET	443	49760	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.738636971 CET	443	49761	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.738675117 CET	49761	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.738907099 CET	49765	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.738948107 CET	443	49765	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.739063978 CET	49761	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.739069939 CET	443	49761	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.739094973 CET	49765	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.739095926 CET	49761	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.739100933 CET	443	49761	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.739850044 CET	49765	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.739861965 CET	443	49765	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.741246939 CET	49767	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.741251945 CET	49766	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.741255045 CET	443	49767	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.741285086 CET	443	49766	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.741357088 CET	49767	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.741436005 CET	49766	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.741501093 CET	49767	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.741508961 CET	443	49767	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.741564989 CET	49766	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.741575003 CET	443	49766	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.744601965 CET	443	49764	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.744622946 CET	443	49764	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.744662046 CET	443	49764	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.744677067 CET	49764	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.744745970 CET	49764	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.744841099 CET	49764	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.744841099 CET	49764	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.744851112 CET	443	49764	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.744858027 CET	443	49764	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.746884108 CET	49768	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.746917009 CET	443	49768	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.746973038 CET	49768	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.747114897 CET	49768	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.747123957 CET	443	49768	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.769217968 CET	443	49762	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.769325972 CET	443	49762	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.769447088 CET	49762	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.769493103 CET	49762	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.769507885 CET	443	49762	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.769522905 CET	49762	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.769529104 CET	443	49762	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.771684885 CET	49769	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.771748066 CET	443	49769	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:42.771812916 CET	49769	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.771992922 CET	49769	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:42.772011042 CET	443	49769	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.500399113 CET	443	49765	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.500888109 CET	49765	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.500941038 CET	443	49765	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.501349926 CET	49765	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.501354933 CET	443	49765	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.502157927 CET	443	49768	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.502480030 CET	49768	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.502511024 CET	443	49768	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.503062010 CET	49768	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.503067017 CET	443	49768	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.507847071 CET	443	49766	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.508148909 CET	49766	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.508171082 CET	443	49766	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.508591890 CET	49766	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.508595943 CET	443	49766	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.531557083 CET	443	49769	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.531864882 CET	49769	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.531897068 CET	443	49769	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.532247066 CET	49769	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.532254934 CET	443	49769	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.539463043 CET	443	49767	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.539762020 CET	49767	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.539787054 CET	443	49767	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.540138960 CET	49767	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.540143967 CET	443	49767	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.636465073 CET	443	49765	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.636625051 CET	443	49765	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.636684895 CET	49765	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.636774063 CET	49765	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.636794090 CET	443	49765	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.636804104 CET	49765	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.636826992 CET	443	49765	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.639338970 CET	49770	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.639384031 CET	443	49770	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.639444113 CET	49770	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.639580011 CET	49770	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.639590979 CET	443	49770	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.641159058 CET	443	49768	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.641367912 CET	443	49768	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.641468048 CET	49768	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.641509056 CET	49768	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.641531944 CET	443	49768	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.641545057 CET	49768	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.641549110 CET	443	49768	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.643915892 CET	49771	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.644027948 CET	443	49771	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.644107103 CET	49771	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.644257069 CET	49771	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.644293070 CET	443	49771	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.646862030 CET	443	49766	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.647008896 CET	443	49766	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.647067070 CET	49766	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.647089958 CET	49766	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.647104979 CET	443	49766	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.647114992 CET	49766	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.647120953 CET	443	49766	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.648850918 CET	49772	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.648886919 CET	443	49772	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.649045944 CET	49772	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.649171114 CET	49772	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.649183035 CET	443	49772	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.669596910 CET	443	49769	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.669850111 CET	443	49769	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.669908047 CET	49769	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.669980049 CET	49769	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.669981003 CET	49769	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.670016050 CET	443	49769	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.670046091 CET	443	49769	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.672221899 CET	49773	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.672266960 CET	443	49773	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.672377110 CET	49773	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.672523022 CET	49773	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.672538996 CET	443	49773	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.683198929 CET	443	49767	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.683393002 CET	443	49767	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.683461905 CET	49767	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.683521032 CET	49767	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.683538914 CET	443	49767	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.683553934 CET	49767	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.683558941 CET	443	49767	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.686369896 CET	49774	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.686412096 CET	443	49774	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:43.686471939 CET	49774	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.686611891 CET	49774	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:43.686628103 CET	443	49774	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.405841112 CET	443	49772	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.406311035 CET	49772	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.406330109 CET	443	49772	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.406752110 CET	49772	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.406758070 CET	443	49772	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.417397022 CET	443	49771	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.417778015 CET	49771	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.417819977 CET	443	49771	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.418128967 CET	49771	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.418138981 CET	443	49771	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.424782991 CET	443	49773	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.425129890 CET	49773	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.425173998 CET	443	49773	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.425441980 CET	49773	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.425450087 CET	443	49773	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.432826042 CET	443	49770	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.433249950 CET	49770	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.433279037 CET	443	49770	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.433739901 CET	49770	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.433747053 CET	443	49770	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.474828005 CET	443	49774	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.475337982 CET	49774	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.475354910 CET	443	49774	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.475747108 CET	49774	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.475750923 CET	443	49774	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.544106007 CET	443	49772	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.544187069 CET	443	49772	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.544260979 CET	49772	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.544394016 CET	49772	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.544410944 CET	443	49772	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.544420004 CET	49772	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.544425011 CET	443	49772	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.547189951 CET	49775	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.547250986 CET	443	49775	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.547346115 CET	49775	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.547491074 CET	49775	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.547508955 CET	443	49775	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.556823015 CET	443	49771	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.556978941 CET	443	49771	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.557044029 CET	49771	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.557084084 CET	49771	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.557084084 CET	49771	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.557100058 CET	443	49771	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.557111979 CET	443	49771	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.558861971 CET	49776	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.558887005 CET	443	49776	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.558994055 CET	49776	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.559111118 CET	49776	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.559125900 CET	443	49776	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.563539982 CET	443	49773	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.563811064 CET	443	49773	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.563859940 CET	49773	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.563893080 CET	49773	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.563893080 CET	49773	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.563906908 CET	443	49773	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.563918114 CET	443	49773	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.565761089 CET	49777	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.565787077 CET	443	49777	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.566004992 CET	49777	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.566106081 CET	49777	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.566117048 CET	443	49777	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.583216906 CET	443	49770	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.583300114 CET	443	49770	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.583374977 CET	49770	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.583400011 CET	49770	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.583412886 CET	443	49770	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.583421946 CET	49770	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.583426952 CET	443	49770	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.585481882 CET	49778	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.585536003 CET	443	49778	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.585628986 CET	49778	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.585760117 CET	49778	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.585786104 CET	443	49778	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.613905907 CET	443	49774	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.614170074 CET	443	49774	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.614275932 CET	49774	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.614304066 CET	49774	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.614317894 CET	443	49774	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.614327908 CET	49774	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.614332914 CET	443	49774	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.616452932 CET	49779	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.616472006 CET	443	49779	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:44.616655111 CET	49779	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.616797924 CET	49779	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:44.616806984 CET	443	49779	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.305936098 CET	443	49775	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.307266951 CET	49775	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.307266951 CET	49775	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.307302952 CET	443	49775	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.307326078 CET	443	49775	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.342155933 CET	443	49777	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.343476057 CET	443	49778	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.343532085 CET	49777	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.343560934 CET	443	49777	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.343720913 CET	49777	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.343727112 CET	443	49777	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.344496012 CET	49778	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.344496012 CET	49778	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.344527960 CET	443	49778	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.344554901 CET	443	49778	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.350054026 CET	443	49776	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.351248980 CET	49776	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.351248980 CET	49776	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.351274967 CET	443	49776	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.351300001 CET	443	49776	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.407042027 CET	443	49779	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.408047915 CET	49779	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.408063889 CET	443	49779	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.410305023 CET	49779	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.410309076 CET	443	49779	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.466511965 CET	443	49775	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.466861010 CET	443	49775	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.470516920 CET	49775	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.480854988 CET	49775	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.480881929 CET	443	49775	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.480921984 CET	49775	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.480931997 CET	443	49775	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.484899044 CET	49781	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.484900951 CET	443	49778	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.484950066 CET	443	49781	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.485414982 CET	443	49778	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.485507965 CET	49781	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.485519886 CET	49778	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.485754013 CET	49781	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.485771894 CET	443	49781	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.485800982 CET	49778	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.485800982 CET	49778	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.485826969 CET	443	49778	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.485843897 CET	443	49778	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.488691092 CET	443	49777	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.488725901 CET	49782	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.488759041 CET	443	49782	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.489598989 CET	443	49777	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.489671946 CET	49782	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.489672899 CET	49777	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.489923954 CET	49777	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.489924908 CET	49782	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.489936113 CET	443	49777	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.489940882 CET	443	49782	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.489965916 CET	49777	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.489972115 CET	443	49777	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.493922949 CET	49783	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.493937969 CET	443	49783	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.494082928 CET	49783	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.494298935 CET	49783	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.494308949 CET	443	49783	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.496658087 CET	443	49776	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.496736050 CET	443	49776	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.496851921 CET	49776	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.496913910 CET	49776	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.496913910 CET	49776	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.496929884 CET	443	49776	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.496946096 CET	443	49776	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.502315998 CET	49784	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.502420902 CET	443	49784	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.502665043 CET	49784	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.502665043 CET	49784	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.502743959 CET	443	49784	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.549962997 CET	443	49779	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.550195932 CET	443	49779	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.550414085 CET	49779	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.550548077 CET	49779	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.550548077 CET	49779	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.550560951 CET	443	49779	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.550569057 CET	443	49779	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.554069042 CET	49785	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.554100990 CET	443	49785	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:45.554302931 CET	49785	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.554658890 CET	49785	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:45.554668903 CET	443	49785	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.237042904 CET	443	49782	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.237561941 CET	49782	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.237591982 CET	443	49782	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.238027096 CET	49782	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.238032103 CET	443	49782	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.246529102 CET	443	49781	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.246885061 CET	49781	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.246912956 CET	443	49781	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.247282982 CET	49781	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.247288942 CET	443	49781	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.258390903 CET	443	49783	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.258790970 CET	49783	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.258805990 CET	443	49783	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.259193897 CET	49783	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.259203911 CET	443	49783	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.259675980 CET	443	49784	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.259979963 CET	49784	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.260042906 CET	443	49784	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.260421038 CET	49784	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.260437012 CET	443	49784	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.376925945 CET	443	49782	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.376991987 CET	443	49782	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.377036095 CET	49782	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.377289057 CET	49782	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.377289057 CET	49782	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.377305984 CET	443	49782	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.377315998 CET	443	49782	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.379995108 CET	49786	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.380065918 CET	443	49786	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.380147934 CET	49786	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.380295992 CET	49786	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.380328894 CET	443	49786	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.390825033 CET	443	49781	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.390914917 CET	443	49781	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.390960932 CET	49781	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.391027927 CET	49781	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.391046047 CET	443	49781	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.391060114 CET	49781	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.391066074 CET	443	49781	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.393274069 CET	49787	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.393304110 CET	443	49787	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.393377066 CET	49787	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.393501043 CET	49787	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.393512011 CET	443	49787	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.399075031 CET	443	49784	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.399188042 CET	443	49784	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.399200916 CET	443	49783	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.399245024 CET	49784	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.399281025 CET	443	49783	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.399328947 CET	49783	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.399332047 CET	49784	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.399355888 CET	443	49784	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.399388075 CET	49784	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.399401903 CET	443	49784	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.399482965 CET	49783	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.399496078 CET	443	49783	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.399508953 CET	49783	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.399513960 CET	443	49783	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.402034998 CET	49788	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.402089119 CET	443	49788	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.402141094 CET	49788	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.402196884 CET	49789	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.402232885 CET	443	49789	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.402286053 CET	49789	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.402400970 CET	49789	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.402415037 CET	443	49789	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:46.402472019 CET	49788	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:46.402487040 CET	443	49788	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.138021946 CET	443	49787	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.138822079 CET	49787	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.138834000 CET	443	49787	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.140062094 CET	49787	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.140068054 CET	443	49787	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.140991926 CET	443	49786	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.149522066 CET	49786	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.149522066 CET	49786	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.149559021 CET	443	49786	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.149593115 CET	443	49786	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.168323040 CET	443	49789	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.171158075 CET	49789	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.171170950 CET	443	49789	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.175833941 CET	49789	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.175841093 CET	443	49789	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.184683084 CET	443	49788	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.187272072 CET	49788	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.187298059 CET	443	49788	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.228435040 CET	49788	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.228460073 CET	443	49788	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.273180008 CET	443	49787	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.273627996 CET	443	49787	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.273819923 CET	49787	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.274074078 CET	49787	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.274092913 CET	443	49787	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.274136066 CET	49787	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.274143934 CET	443	49787	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.277686119 CET	49790	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.277719975 CET	443	49790	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.277829885 CET	49790	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.278033972 CET	49790	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.278042078 CET	443	49790	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.284382105 CET	443	49786	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.284655094 CET	443	49786	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.284859896 CET	49786	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.284938097 CET	49786	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.284938097 CET	49786	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.284957886 CET	443	49786	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.284962893 CET	443	49786	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.288218975 CET	49791	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.288266897 CET	443	49791	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.288410902 CET	49791	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.290333986 CET	49791	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.290349960 CET	443	49791	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.309436083 CET	443	49789	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.309606075 CET	443	49789	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.310504913 CET	49789	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.310592890 CET	49789	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.310610056 CET	443	49789	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.310692072 CET	49789	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.310698032 CET	443	49789	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.316337109 CET	49792	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.316382885 CET	443	49792	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.322587967 CET	49792	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.322587967 CET	49792	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.322633028 CET	443	49792	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.365055084 CET	443	49788	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.365139961 CET	443	49788	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.365451097 CET	49788	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.365451097 CET	49788	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.365504980 CET	49788	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.365520000 CET	443	49788	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.365729094 CET	443	49785	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.367412090 CET	49785	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.367427111 CET	443	49785	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.368154049 CET	49785	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.368158102 CET	443	49785	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.370207071 CET	49793	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.370235920 CET	443	49793	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.370353937 CET	49793	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.374408007 CET	49793	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.374422073 CET	443	49793	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.505157948 CET	443	49785	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.505295992 CET	443	49785	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.505552053 CET	49785	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.505604982 CET	49785	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.505604982 CET	49785	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.505625010 CET	443	49785	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.505635977 CET	443	49785	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.516778946 CET	49794	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.516844988 CET	443	49794	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:47.516962051 CET	49794	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.520431042 CET	49794	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:47.520450115 CET	443	49794	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.039524078 CET	443	49790	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.042562008 CET	49790	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.042598009 CET	443	49790	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.043560982 CET	49790	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.043566942 CET	443	49790	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.046977997 CET	443	49791	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.047691107 CET	49791	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.047707081 CET	443	49791	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.048551083 CET	49791	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.048558950 CET	443	49791	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.093389988 CET	443	49792	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.112732887 CET	49792	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.112799883 CET	443	49792	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.114006996 CET	49792	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.114021063 CET	443	49792	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.128613949 CET	443	49793	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.129467010 CET	49793	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.129482985 CET	443	49793	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.130409956 CET	49793	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.130414963 CET	443	49793	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.179321051 CET	443	49790	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.179454088 CET	443	49790	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.179502964 CET	49790	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.180097103 CET	49790	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.180115938 CET	443	49790	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.180130959 CET	49790	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.180136919 CET	443	49790	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.188493013 CET	443	49791	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.188575983 CET	443	49791	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.188653946 CET	49791	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.189605951 CET	49791	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.189630985 CET	443	49791	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.189644098 CET	49791	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.189651012 CET	443	49791	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.197788954 CET	49795	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.197824955 CET	443	49795	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.197931051 CET	49795	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.199728012 CET	49795	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.199742079 CET	443	49795	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.201833963 CET	49796	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.201872110 CET	443	49796	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.201931953 CET	49796	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.202085972 CET	49796	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.202100039 CET	443	49796	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.248503923 CET	443	49792	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.248903990 CET	443	49792	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.248987913 CET	49792	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.252005100 CET	49792	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.252058983 CET	443	49792	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.252089977 CET	49792	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.252106905 CET	443	49792	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.264112949 CET	443	49793	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.264281988 CET	443	49793	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.264348984 CET	49793	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.276901007 CET	49793	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.276922941 CET	443	49793	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.276963949 CET	49793	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.276969910 CET	443	49793	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.283001900 CET	49797	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.283047915 CET	443	49797	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.283104897 CET	49797	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.287039042 CET	49798	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.287081957 CET	443	49798	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.287158012 CET	49798	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.288502932 CET	49797	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.288516998 CET	443	49797	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.288893938 CET	49798	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.288906097 CET	443	49798	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.289427996 CET	443	49794	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.290349960 CET	49794	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.290393114 CET	443	49794	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.291990995 CET	49794	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.292011023 CET	443	49794	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.429605007 CET	443	49794	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.429687023 CET	443	49794	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.429744005 CET	49794	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.430210114 CET	49794	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.430239916 CET	443	49794	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.430248022 CET	49794	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.430255890 CET	443	49794	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.437058926 CET	49799	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.437108994 CET	443	49799	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.437172890 CET	49799	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.437526941 CET	49799	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.437545061 CET	443	49799	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.978413105 CET	443	49795	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.979394913 CET	49795	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.979413033 CET	443	49795	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.980652094 CET	49795	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.980658054 CET	443	49795	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.992449045 CET	443	49796	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.993190050 CET	49796	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.993230104 CET	443	49796	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:48.994163990 CET	49796	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:48.994169950 CET	443	49796	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.057674885 CET	443	49798	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.058269024 CET	49798	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.058331013 CET	443	49798	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.059335947 CET	49798	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.059345961 CET	443	49798	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.065067053 CET	443	49797	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.065579891 CET	49797	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.065608978 CET	443	49797	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.066864967 CET	49797	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.066874027 CET	443	49797	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.121465921 CET	443	49795	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.121546984 CET	443	49795	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.121603966 CET	49795	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.121773958 CET	49795	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.121793985 CET	443	49795	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.121800900 CET	49795	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.121808052 CET	443	49795	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.124387026 CET	49800	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.124449968 CET	443	49800	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.124551058 CET	49800	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.124697924 CET	49800	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.124716043 CET	443	49800	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.132304907 CET	443	49796	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.132589102 CET	443	49796	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.132638931 CET	49796	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.132683039 CET	49796	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.132702112 CET	443	49796	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.132718086 CET	49796	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.132723093 CET	443	49796	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.134963036 CET	49801	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.134995937 CET	443	49801	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.135116100 CET	49801	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.135234118 CET	49801	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.135246992 CET	443	49801	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.194344044 CET	443	49798	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.194470882 CET	443	49798	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.194526911 CET	49798	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.194633961 CET	49798	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.194660902 CET	443	49798	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.194672108 CET	49798	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.194678068 CET	443	49798	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.197313070 CET	49802	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.197359085 CET	443	49802	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.197510958 CET	49802	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.197727919 CET	49802	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.197741985 CET	443	49802	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.204768896 CET	443	49797	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.205082893 CET	443	49797	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.205142975 CET	49797	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.205172062 CET	49797	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.205195904 CET	443	49797	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.205218077 CET	49797	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.205230951 CET	443	49797	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.207323074 CET	49803	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.207355022 CET	443	49803	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.207417011 CET	49803	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.207534075 CET	49803	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.207550049 CET	443	49803	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.225677967 CET	443	49799	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.226275921 CET	49799	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.226299047 CET	443	49799	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.227068901 CET	49799	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.227075100 CET	443	49799	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.371026039 CET	443	49799	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.371268988 CET	443	49799	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.371378899 CET	49799	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.371419907 CET	49799	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.371444941 CET	443	49799	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.371459961 CET	49799	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.371468067 CET	443	49799	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.374232054 CET	49804	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.374280930 CET	443	49804	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.374346018 CET	49804	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.374525070 CET	49804	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.374536037 CET	443	49804	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.557566881 CET	49805	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:59:49.557630062 CET	443	49805	142.250.184.196	192.168.2.4
Oct 29, 2024 16:59:49.557709932 CET	49805	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:59:49.558034897 CET	49805	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:59:49.558052063 CET	443	49805	142.250.184.196	192.168.2.4
Oct 29, 2024 16:59:49.866564989 CET	443	49800	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.867082119 CET	49800	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.867111921 CET	443	49800	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.867551088 CET	49800	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.867558002 CET	443	49800	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.910798073 CET	443	49801	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.911278963 CET	49801	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.911319971 CET	443	49801	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.911766052 CET	49801	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.911772966 CET	443	49801	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.973037004 CET	443	49802	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.973501921 CET	49802	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.973532915 CET	443	49802	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.973948956 CET	49802	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.973957062 CET	443	49802	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.976258039 CET	443	49803	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.976624966 CET	49803	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.976636887 CET	443	49803	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:49.977018118 CET	49803	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:49.977022886 CET	443	49803	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.003755093 CET	443	49800	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.004887104 CET	443	49800	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.004977942 CET	49800	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.004978895 CET	49800	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.005032063 CET	49800	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.005048990 CET	443	49800	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.008121014 CET	49806	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.008172035 CET	443	49806	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.008246899 CET	49806	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.008383036 CET	49806	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.008399010 CET	443	49806	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.050421953 CET	443	49801	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.050900936 CET	443	49801	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.050962925 CET	49801	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.051018000 CET	49801	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.051031113 CET	443	49801	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.051042080 CET	49801	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.051047087 CET	443	49801	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.054639101 CET	49807	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.054702997 CET	443	49807	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.054761887 CET	49807	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.054956913 CET	49807	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.054972887 CET	443	49807	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.109030008 CET	443	49802	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.109440088 CET	443	49802	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.109589100 CET	49802	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.109623909 CET	49802	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.109637976 CET	443	49802	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.109651089 CET	49802	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.109657049 CET	443	49802	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.112189054 CET	49808	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.112220049 CET	443	49808	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.112313986 CET	49808	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.112548113 CET	49808	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.112559080 CET	443	49808	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.116692066 CET	443	49803	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.116767883 CET	443	49803	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.116924047 CET	49803	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.116955996 CET	49803	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.116961956 CET	443	49803	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.116971970 CET	49803	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.116976023 CET	443	49803	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.118937969 CET	49809	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.118972063 CET	443	49809	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.119174957 CET	49809	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.119335890 CET	49809	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.119348049 CET	443	49809	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.136756897 CET	443	49804	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.137166023 CET	49804	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.137193918 CET	443	49804	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.137579918 CET	49804	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.137593031 CET	443	49804	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.275460958 CET	443	49804	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.275840998 CET	443	49804	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.275913954 CET	49804	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.275950909 CET	49804	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.275974989 CET	443	49804	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.275999069 CET	49804	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.276006937 CET	443	49804	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.278724909 CET	49810	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.278764009 CET	443	49810	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.278960943 CET	49810	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.279158115 CET	49810	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.279170990 CET	443	49810	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.410712957 CET	443	49805	142.250.184.196	192.168.2.4
Oct 29, 2024 16:59:50.411025047 CET	49805	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:59:50.411039114 CET	443	49805	142.250.184.196	192.168.2.4
Oct 29, 2024 16:59:50.412323952 CET	443	49805	142.250.184.196	192.168.2.4
Oct 29, 2024 16:59:50.412977934 CET	49805	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:59:50.413090944 CET	443	49805	142.250.184.196	192.168.2.4
Oct 29, 2024 16:59:50.459018946 CET	49805	443	192.168.2.4	142.250.184.196
Oct 29, 2024 16:59:50.800827980 CET	443	49806	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.801297903 CET	49806	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.801328897 CET	443	49806	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.801863909 CET	49806	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.801868916 CET	443	49806	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.807977915 CET	443	49807	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.808526039 CET	49807	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.808557034 CET	443	49807	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.808927059 CET	49807	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.808932066 CET	443	49807	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.903759003 CET	443	49808	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.904288054 CET	49808	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.904351950 CET	443	49808	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.904731035 CET	49808	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.904746056 CET	443	49808	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.913333893 CET	443	49809	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.913691044 CET	49809	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.913707972 CET	443	49809	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.914084911 CET	49809	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.914089918 CET	443	49809	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.942651987 CET	443	49807	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.942764044 CET	443	49807	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.942809105 CET	49807	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.943000078 CET	49807	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.943022013 CET	443	49807	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.943031073 CET	49807	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.943036079 CET	443	49807	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.945137024 CET	443	49806	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.945278883 CET	443	49806	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.945487022 CET	49806	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.946070910 CET	49806	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.946094990 CET	443	49806	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.946110010 CET	49806	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.946115971 CET	443	49806	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.946770906 CET	49811	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.946815968 CET	443	49811	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.946928024 CET	49811	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.947092056 CET	49811	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.947103977 CET	443	49811	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.947897911 CET	49812	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.947917938 CET	443	49812	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:50.948062897 CET	49812	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.948169947 CET	49812	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:50.948180914 CET	443	49812	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.024245977 CET	443	49810	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.024832964 CET	49810	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.024883986 CET	443	49810	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.025293112 CET	49810	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.025305986 CET	443	49810	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.044615030 CET	443	49808	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.044744015 CET	443	49808	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.044800043 CET	49808	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.045048952 CET	49808	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.045048952 CET	49808	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.045088053 CET	443	49808	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.045113087 CET	443	49808	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.047713041 CET	49813	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.047755957 CET	443	49813	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.047836065 CET	49813	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.047982931 CET	49813	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.047995090 CET	443	49813	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.056216002 CET	443	49809	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.056382895 CET	443	49809	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.056628942 CET	49809	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.056628942 CET	49809	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.056628942 CET	49809	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.059015989 CET	49814	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.059056044 CET	443	49814	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.059161901 CET	49814	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.059331894 CET	49814	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.059345007 CET	443	49814	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.158567905 CET	443	49810	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.158694029 CET	443	49810	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.158773899 CET	49810	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.158906937 CET	49810	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.158956051 CET	443	49810	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.158986092 CET	49810	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.159003973 CET	443	49810	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.161631107 CET	49815	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.161680937 CET	443	49815	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.161756039 CET	49815	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.161896944 CET	49815	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.161911011 CET	443	49815	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.365282059 CET	49809	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.365324020 CET	443	49809	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.691553116 CET	443	49811	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.692609072 CET	49811	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.692609072 CET	49811	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.692640066 CET	443	49811	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.692662001 CET	443	49811	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.732234001 CET	443	49812	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.733119011 CET	49812	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.733119011 CET	49812	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.733143091 CET	443	49812	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.733158112 CET	443	49812	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.806967020 CET	443	49813	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.808095932 CET	49813	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.808132887 CET	443	49813	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.808811903 CET	49813	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.808820963 CET	443	49813	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.826729059 CET	443	49811	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.826843977 CET	443	49811	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.830383062 CET	49811	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.830383062 CET	49811	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.830482006 CET	49811	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.830502033 CET	443	49811	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.831604958 CET	443	49814	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.834311962 CET	49816	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.834350109 CET	443	49816	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.834642887 CET	49814	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.834666014 CET	443	49814	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.834712029 CET	49816	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.834939003 CET	49814	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.834950924 CET	443	49814	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.834953070 CET	49816	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.834970951 CET	443	49816	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.869452000 CET	443	49812	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.869656086 CET	443	49812	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.870378971 CET	49812	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.870480061 CET	49812	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.870480061 CET	49812	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.870495081 CET	443	49812	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.870502949 CET	443	49812	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.873034954 CET	49817	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.873116016 CET	443	49817	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.873286009 CET	49817	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.873436928 CET	49817	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.873467922 CET	443	49817	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.925540924 CET	443	49815	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.926320076 CET	49815	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.926346064 CET	443	49815	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.930320978 CET	49815	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.930327892 CET	443	49815	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.942845106 CET	443	49813	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.943051100 CET	443	49813	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.943217993 CET	49813	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.943217993 CET	49813	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.943267107 CET	49813	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.943284988 CET	443	49813	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.946610928 CET	49818	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.946652889 CET	443	49818	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.946856976 CET	49818	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.946856976 CET	49818	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.946891069 CET	443	49818	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.971671104 CET	443	49814	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.971827984 CET	443	49814	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.972430944 CET	49814	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.972482920 CET	49814	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.972482920 CET	49814	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.972507000 CET	443	49814	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.972521067 CET	443	49814	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.978342056 CET	49819	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.978409052 CET	443	49819	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:51.982393980 CET	49819	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.982621908 CET	49819	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:51.982644081 CET	443	49819	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.065382004 CET	443	49815	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.065502882 CET	443	49815	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.065850973 CET	49815	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.065917015 CET	49815	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.065917015 CET	49815	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.065937042 CET	443	49815	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.065949917 CET	443	49815	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.069168091 CET	49820	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.069224119 CET	443	49820	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.069462061 CET	49820	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.069690943 CET	49820	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.069720984 CET	443	49820	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.620673895 CET	443	49816	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.621217966 CET	49816	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.621244907 CET	443	49816	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.621680021 CET	49816	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.621686935 CET	443	49816	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.626247883 CET	443	49817	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.627012014 CET	49817	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.627012968 CET	49817	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.627072096 CET	443	49817	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.627120018 CET	443	49817	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.747133970 CET	443	49819	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.748188972 CET	49819	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.748229980 CET	443	49819	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.749053001 CET	49819	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.749070883 CET	443	49819	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.749336958 CET	443	49818	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.750438929 CET	49818	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.750458002 CET	443	49818	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.751399994 CET	49818	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.751408100 CET	443	49818	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.761559963 CET	443	49816	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.762098074 CET	443	49816	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.762152910 CET	49816	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.762216091 CET	49816	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.762237072 CET	443	49816	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.762249947 CET	49816	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.762259960 CET	443	49816	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.763290882 CET	443	49817	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.763390064 CET	443	49817	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.763545036 CET	49817	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.763952017 CET	49817	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.763952017 CET	49817	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.764003992 CET	443	49817	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.764028072 CET	443	49817	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.768043041 CET	49821	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.768085003 CET	443	49821	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.768176079 CET	49821	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.768296957 CET	49822	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.768336058 CET	443	49822	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.768390894 CET	49822	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.768491030 CET	49822	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.768506050 CET	443	49822	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.768760920 CET	49821	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.768769979 CET	443	49821	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.864305973 CET	443	49820	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.865030050 CET	49820	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.865050077 CET	443	49820	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.866400003 CET	49820	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.866406918 CET	443	49820	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.884102106 CET	443	49819	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.884284973 CET	443	49819	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.884356976 CET	49819	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.884668112 CET	49819	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.884720087 CET	443	49819	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.884768009 CET	49819	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.884783030 CET	443	49819	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.890734911 CET	49823	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.890774965 CET	443	49823	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.890856028 CET	49823	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.891210079 CET	49823	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.891221046 CET	443	49823	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.891561985 CET	443	49818	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.891635895 CET	443	49818	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.891685009 CET	49818	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.891966105 CET	49818	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.891990900 CET	443	49818	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.892008066 CET	49818	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.892014980 CET	443	49818	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.895690918 CET	49824	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.895725012 CET	443	49824	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:52.895873070 CET	49824	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.896323919 CET	49824	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:52.896334887 CET	443	49824	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.005125999 CET	443	49820	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.005287886 CET	443	49820	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.005363941 CET	49820	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.008739948 CET	49820	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.008764029 CET	443	49820	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.045521975 CET	49825	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.045571089 CET	443	49825	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.045663118 CET	49825	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.045872927 CET	49825	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.045886993 CET	443	49825	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.522461891 CET	443	49822	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.524956942 CET	49822	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.524992943 CET	443	49822	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.526304007 CET	49822	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.526314974 CET	443	49822	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.538731098 CET	443	49821	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.539412975 CET	49821	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.539444923 CET	443	49821	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.540056944 CET	49821	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.540061951 CET	443	49821	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.648713112 CET	443	49824	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.649363041 CET	49824	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.649390936 CET	443	49824	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.649933100 CET	49824	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.649938107 CET	443	49824	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.659671068 CET	443	49822	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.659820080 CET	443	49822	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.659897089 CET	49822	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.660263062 CET	49822	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.660263062 CET	49822	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.660284996 CET	443	49822	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.660298109 CET	443	49822	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.664933920 CET	49826	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.664964914 CET	443	49826	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.665128946 CET	49826	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.665241957 CET	49826	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.665252924 CET	443	49826	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.666050911 CET	443	49823	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.666752100 CET	49823	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.666766882 CET	443	49823	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.667648077 CET	49823	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.667651892 CET	443	49823	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.678196907 CET	443	49821	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.678268909 CET	443	49821	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.678333044 CET	49821	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.678509951 CET	49821	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.678523064 CET	443	49821	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.678539038 CET	49821	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.678544044 CET	443	49821	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.681864023 CET	49827	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.681905031 CET	443	49827	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.681996107 CET	49827	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.682169914 CET	49827	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.682184935 CET	443	49827	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.792728901 CET	443	49824	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.792862892 CET	443	49824	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.792938948 CET	49824	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.793199062 CET	49824	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.793215990 CET	443	49824	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.798710108 CET	49828	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.798753977 CET	443	49828	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.798846960 CET	49828	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.799438953 CET	49828	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.799451113 CET	443	49828	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.804861069 CET	443	49823	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.804994106 CET	443	49823	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.805152893 CET	49823	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.805425882 CET	443	49825	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.805535078 CET	49823	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.805545092 CET	443	49823	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.805555105 CET	49823	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.805561066 CET	443	49823	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.806253910 CET	49825	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.806276083 CET	443	49825	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.807099104 CET	49825	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.807111025 CET	443	49825	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.810746908 CET	49829	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.810794115 CET	443	49829	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.810909986 CET	49829	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.811166048 CET	49829	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.811182976 CET	443	49829	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.943089962 CET	443	49825	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.943353891 CET	443	49825	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.943458080 CET	49825	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.943504095 CET	49825	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.943525076 CET	443	49825	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.943625927 CET	49825	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.943633080 CET	443	49825	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.946768045 CET	49830	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.946822882 CET	443	49830	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:53.947005987 CET	49830	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.947166920 CET	49830	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:53.947180986 CET	443	49830	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.438781023 CET	443	49827	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.440006018 CET	49827	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.440032959 CET	443	49827	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.440906048 CET	49827	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.440915108 CET	443	49827	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.475454092 CET	443	49826	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.477854013 CET	49826	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.477893114 CET	443	49826	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.478379011 CET	49826	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.478387117 CET	443	49826	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.572716951 CET	443	49829	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.573483944 CET	49829	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.573517084 CET	443	49829	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.574116945 CET	49829	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.574124098 CET	443	49829	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.577649117 CET	443	49827	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.577805042 CET	443	49827	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.577883959 CET	49827	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.578371048 CET	49827	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.578392029 CET	443	49827	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.604103088 CET	49831	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.604139090 CET	443	49831	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.604280949 CET	49831	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.605142117 CET	49831	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.605156898 CET	443	49831	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.617522955 CET	443	49826	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.617577076 CET	443	49826	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.617633104 CET	49826	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.618105888 CET	49826	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.618128061 CET	443	49826	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.618144035 CET	49826	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.618151903 CET	443	49826	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.638832092 CET	49832	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.638879061 CET	443	49832	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.638956070 CET	49832	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.639885902 CET	49832	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.639906883 CET	443	49832	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.698409081 CET	443	49830	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.698906898 CET	49830	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.698947906 CET	443	49830	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.699640036 CET	49830	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.699645042 CET	443	49830	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.712311029 CET	443	49829	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.712404966 CET	443	49829	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.712464094 CET	49829	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.712770939 CET	49829	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.712786913 CET	443	49829	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.712835073 CET	49829	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.712842941 CET	443	49829	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.716290951 CET	49833	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.716341019 CET	443	49833	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.716480017 CET	49833	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.716604948 CET	49833	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.716618061 CET	443	49833	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.838067055 CET	443	49830	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.838150978 CET	443	49830	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.838452101 CET	49830	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.838561058 CET	49830	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.838579893 CET	443	49830	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.838591099 CET	49830	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.838597059 CET	443	49830	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.844670057 CET	49834	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.844712973 CET	443	49834	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.844806910 CET	49834	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.845066071 CET	49834	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.845089912 CET	443	49834	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.905653000 CET	443	49828	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.906198025 CET	49828	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.906229973 CET	443	49828	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:54.906805992 CET	49828	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:54.906810999 CET	443	49828	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.050769091 CET	443	49828	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.050856113 CET	443	49828	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.050914049 CET	49828	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.051310062 CET	49828	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.051337004 CET	443	49828	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.051354885 CET	49828	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.051361084 CET	443	49828	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.056220055 CET	49835	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.056279898 CET	443	49835	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.056400061 CET	49835	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.056643009 CET	49835	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.056663036 CET	443	49835	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.395663977 CET	443	49831	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.396143913 CET	49831	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.396176100 CET	443	49831	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.396605015 CET	49831	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.396610975 CET	443	49831	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.402714014 CET	443	49832	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.403067112 CET	49832	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.403083086 CET	443	49832	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.403498888 CET	49832	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.403506041 CET	443	49832	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.530106068 CET	443	49833	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.530653000 CET	49833	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.530670881 CET	443	49833	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.531112909 CET	49833	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.531119108 CET	443	49833	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.540039062 CET	443	49831	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.540131092 CET	443	49831	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.540184975 CET	49831	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.540267944 CET	49831	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.540287971 CET	443	49831	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.540302038 CET	49831	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.540308952 CET	443	49831	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.541675091 CET	443	49832	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.541733027 CET	443	49832	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.541798115 CET	49832	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.541950941 CET	49832	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.541971922 CET	443	49832	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.541982889 CET	49832	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.541990042 CET	443	49832	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.543132067 CET	49836	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.543179989 CET	443	49836	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.543260098 CET	49836	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.543401003 CET	49836	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.543421984 CET	443	49836	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.543996096 CET	49837	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.544022083 CET	443	49837	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.544152975 CET	49837	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.544295073 CET	49837	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.544302940 CET	443	49837	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.664969921 CET	443	49834	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.665759087 CET	49834	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.665779114 CET	443	49834	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.666547060 CET	49834	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.666553020 CET	443	49834	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.675060987 CET	443	49833	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.675302982 CET	443	49833	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.675381899 CET	49833	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.675784111 CET	49833	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.675784111 CET	49833	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.675820112 CET	443	49833	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.675844908 CET	443	49833	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.678944111 CET	49838	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.678993940 CET	443	49838	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.679059029 CET	49838	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.679331064 CET	49838	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.679344893 CET	443	49838	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.802701950 CET	443	49834	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.802767038 CET	443	49834	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.802815914 CET	49834	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.819765091 CET	443	49835	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.835905075 CET	49834	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.835930109 CET	443	49834	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.835941076 CET	49834	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.835949898 CET	443	49834	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.836628914 CET	49835	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.836678982 CET	443	49835	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.837093115 CET	49835	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.837107897 CET	443	49835	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.841269016 CET	49839	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.841304064 CET	443	49839	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.841377020 CET	49839	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.841619015 CET	49839	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.841630936 CET	443	49839	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.974216938 CET	443	49835	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.974952936 CET	443	49835	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.975133896 CET	49835	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.975385904 CET	49835	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.975385904 CET	49835	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.975424051 CET	443	49835	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.975449085 CET	443	49835	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.983653069 CET	49840	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.983704090 CET	443	49840	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:55.983817101 CET	49840	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.984486103 CET	49840	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:55.984518051 CET	443	49840	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.303215981 CET	443	49836	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.303930998 CET	49836	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.303947926 CET	443	49836	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.304642916 CET	49836	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.304651976 CET	443	49836	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.353257895 CET	443	49837	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.354203939 CET	49837	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.354219913 CET	443	49837	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.354974031 CET	49837	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.354979038 CET	443	49837	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.439028978 CET	443	49838	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.439918995 CET	49838	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.439939022 CET	443	49838	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.440928936 CET	49838	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.440934896 CET	443	49838	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.477643967 CET	443	49836	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.477713108 CET	443	49836	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.477802992 CET	49836	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.497031927 CET	443	49837	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.497051001 CET	443	49837	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.497091055 CET	443	49837	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.497119904 CET	49837	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.497173071 CET	49837	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.499099016 CET	49836	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.499124050 CET	443	49836	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.501357079 CET	49837	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.501373053 CET	443	49837	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.501384020 CET	49837	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.501389980 CET	443	49837	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.504688025 CET	49841	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.504719019 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.504806995 CET	49841	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.505419970 CET	49841	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.505438089 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.506442070 CET	49842	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.506527901 CET	443	49842	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.506601095 CET	49842	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.507091999 CET	49842	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.507124901 CET	443	49842	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.576582909 CET	443	49838	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.576730013 CET	443	49838	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.576819897 CET	49838	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.577286005 CET	49838	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.577286005 CET	49838	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.577305079 CET	443	49838	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.577316046 CET	443	49838	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.582957029 CET	49843	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.582994938 CET	443	49843	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.583139896 CET	49843	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.583358049 CET	49843	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.583374023 CET	443	49843	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.614180088 CET	443	49839	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.614721060 CET	49839	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.614737034 CET	443	49839	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.615567923 CET	49839	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.615571976 CET	443	49839	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.745908976 CET	443	49840	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.746407986 CET	49840	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.746480942 CET	443	49840	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.746838093 CET	49840	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.746855974 CET	443	49840	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.752146006 CET	443	49839	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.752382994 CET	443	49839	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.752459049 CET	49839	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.752638102 CET	49839	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.752652884 CET	443	49839	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.752665043 CET	49839	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.752671003 CET	443	49839	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.754849911 CET	49844	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.754870892 CET	443	49844	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.754930973 CET	49844	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.755064011 CET	49844	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.755074024 CET	443	49844	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.883843899 CET	443	49840	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.883862019 CET	443	49840	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.883919954 CET	443	49840	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.883959055 CET	49840	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.884031057 CET	49840	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.884366035 CET	49840	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.884414911 CET	443	49840	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.884445906 CET	49840	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.884463072 CET	443	49840	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.888127089 CET	49845	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.888175964 CET	443	49845	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:56.888380051 CET	49845	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.888449907 CET	49845	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:56.888458014 CET	443	49845	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.256299973 CET	443	49842	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.257319927 CET	49842	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.257385015 CET	443	49842	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.258687019 CET	49842	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.258701086 CET	443	49842	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.302556992 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.303067923 CET	49841	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.303085089 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.303751945 CET	49841	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.303761959 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.358515024 CET	443	49843	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.358983994 CET	49843	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.358998060 CET	443	49843	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.359391928 CET	49843	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.359397888 CET	443	49843	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.394376040 CET	443	49842	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.394404888 CET	443	49842	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.394478083 CET	443	49842	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.394545078 CET	49842	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.394706964 CET	49842	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.394752026 CET	443	49842	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.394782066 CET	49842	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.394803047 CET	443	49842	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.397696018 CET	49846	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.397737026 CET	443	49846	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.397882938 CET	49846	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.398088932 CET	49846	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.398099899 CET	443	49846	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.482729912 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.482781887 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.482832909 CET	49841	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.482851028 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.482892036 CET	49841	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.483139992 CET	49841	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.483145952 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.483160973 CET	49841	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.483527899 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.483604908 CET	443	49841	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.483834982 CET	49841	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.485757113 CET	49847	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.485795975 CET	443	49847	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.485934973 CET	49847	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.486150026 CET	49847	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.486166000 CET	443	49847	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.495461941 CET	443	49843	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.495632887 CET	443	49843	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.495737076 CET	49843	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.495793104 CET	49843	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.495815992 CET	443	49843	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.495851040 CET	49843	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.495857000 CET	443	49843	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.498287916 CET	49848	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.498382092 CET	443	49848	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.498486996 CET	49848	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.498620987 CET	49848	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.498641968 CET	443	49848	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.504591942 CET	443	49844	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.505157948 CET	49844	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.505191088 CET	443	49844	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.505631924 CET	49844	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.505637884 CET	443	49844	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.643024921 CET	443	49844	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.644025087 CET	443	49844	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.644104958 CET	49844	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.644145966 CET	49844	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.644167900 CET	443	49844	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.644181013 CET	49844	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.644187927 CET	443	49844	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.646935940 CET	49849	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.646980047 CET	443	49849	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.647051096 CET	49849	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.647200108 CET	49849	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.647212029 CET	443	49849	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.673615932 CET	443	49845	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.674009085 CET	49845	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.674021959 CET	443	49845	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.674428940 CET	49845	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.674434900 CET	443	49845	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.820337057 CET	443	49845	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.820415020 CET	443	49845	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.820472002 CET	49845	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.820621967 CET	49845	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.820642948 CET	443	49845	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.820652962 CET	49845	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.820658922 CET	443	49845	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.823566914 CET	49850	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.823684931 CET	443	49850	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:57.823766947 CET	49850	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.823909044 CET	49850	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:57.823944092 CET	443	49850	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.170341969 CET	443	49846	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.170897007 CET	49846	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.170917988 CET	443	49846	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.171340942 CET	49846	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.171348095 CET	443	49846	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.251553059 CET	443	49847	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.252023935 CET	49847	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.252043962 CET	443	49847	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.252466917 CET	49847	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.252475023 CET	443	49847	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.280479908 CET	443	49848	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.280865908 CET	49848	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.280908108 CET	443	49848	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.281395912 CET	49848	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.281408072 CET	443	49848	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.309638977 CET	443	49846	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.309726000 CET	443	49846	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.309932947 CET	49846	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.309964895 CET	49846	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.309964895 CET	49846	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.309983969 CET	443	49846	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.309995890 CET	443	49846	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.312599897 CET	49851	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.312644005 CET	443	49851	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.312707901 CET	49851	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.312823057 CET	49851	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.312838078 CET	443	49851	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.397279978 CET	443	49847	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.397459030 CET	443	49847	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.397512913 CET	49847	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.397819042 CET	49847	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.397839069 CET	443	49847	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.397845984 CET	49847	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.397851944 CET	443	49847	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.402153969 CET	49852	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.402190924 CET	443	49852	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.402354002 CET	49852	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.402497053 CET	49852	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.402508974 CET	443	49852	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.402734995 CET	443	49849	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.403109074 CET	49849	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.403143883 CET	443	49849	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.403551102 CET	49849	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.403558969 CET	443	49849	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.420825005 CET	443	49848	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.421272993 CET	443	49848	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.421350002 CET	49848	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.421406984 CET	49848	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.421406984 CET	49848	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.421438932 CET	443	49848	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.421468019 CET	443	49848	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.423573971 CET	49853	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.423614979 CET	443	49853	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.423676968 CET	49853	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.423839092 CET	49853	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.423851967 CET	443	49853	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.542537928 CET	443	49849	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.542659998 CET	443	49849	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.542726040 CET	49849	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.542960882 CET	49849	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.542984962 CET	443	49849	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.543003082 CET	49849	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.543009996 CET	443	49849	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.547081947 CET	49854	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.547108889 CET	443	49854	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.547239065 CET	49854	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.547425985 CET	49854	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.547434092 CET	443	49854	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.612052917 CET	443	49850	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.612525940 CET	49850	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.612601995 CET	443	49850	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.613066912 CET	49850	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.613081932 CET	443	49850	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.751854897 CET	443	49850	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.751919031 CET	443	49850	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.752216101 CET	49850	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.752423048 CET	49850	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.752423048 CET	49850	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.752443075 CET	443	49850	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.752459049 CET	443	49850	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.756469011 CET	49855	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.756511927 CET	443	49855	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:58.760505915 CET	49855	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.764343977 CET	49855	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:58.764364004 CET	443	49855	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.111511946 CET	443	49851	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.112049103 CET	49851	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.112101078 CET	443	49851	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.112517118 CET	49851	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.112524986 CET	443	49851	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.164789915 CET	443	49852	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.165726900 CET	49852	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.165726900 CET	49852	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.165750980 CET	443	49852	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.165766954 CET	443	49852	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.235995054 CET	443	49853	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.237318039 CET	49853	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.237354040 CET	443	49853	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.237791061 CET	49853	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.237797976 CET	443	49853	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.256648064 CET	443	49851	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.256720066 CET	443	49851	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.256966114 CET	49851	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.256966114 CET	49851	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.257013083 CET	49851	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.257035971 CET	443	49851	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.259762049 CET	49856	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.259807110 CET	443	49856	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.259891033 CET	49856	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.260030031 CET	49856	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.260046005 CET	443	49856	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.306220055 CET	443	49852	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.306407928 CET	443	49852	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.306519985 CET	49852	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.306519985 CET	49852	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.306641102 CET	49852	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.306658030 CET	443	49852	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.309288979 CET	49857	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.309320927 CET	443	49857	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.309498072 CET	49857	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.309674978 CET	49857	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.309689999 CET	443	49857	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.343924999 CET	443	49854	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.344513893 CET	49854	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.344528913 CET	443	49854	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.344873905 CET	49854	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.344878912 CET	443	49854	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.372303963 CET	443	49853	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.372338057 CET	443	49853	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.372391939 CET	443	49853	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.372423887 CET	49853	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.372625113 CET	49853	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.372673035 CET	49853	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.372689962 CET	443	49853	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.372718096 CET	49853	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.372724056 CET	443	49853	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.375549078 CET	49858	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.375572920 CET	443	49858	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.375677109 CET	49858	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.375824928 CET	49858	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.375837088 CET	443	49858	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.483211040 CET	443	49854	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.483331919 CET	443	49854	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.483509064 CET	49854	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.483678102 CET	49854	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.483696938 CET	443	49854	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.483742952 CET	49854	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.483748913 CET	443	49854	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.486552000 CET	49859	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.486577988 CET	443	49859	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.487031937 CET	49859	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.487031937 CET	49859	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.487060070 CET	443	49859	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.536955118 CET	443	49855	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.537914991 CET	49855	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.537914991 CET	49855	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.537944078 CET	443	49855	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.537961006 CET	443	49855	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.676940918 CET	443	49855	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.676964998 CET	443	49855	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.677007914 CET	443	49855	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.677020073 CET	49855	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.677058935 CET	49855	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.677275896 CET	49855	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.677303076 CET	443	49855	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.677316904 CET	49855	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.677323103 CET	443	49855	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.680047035 CET	49860	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.680114031 CET	443	49860	13.107.253.64	192.168.2.4
Oct 29, 2024 16:59:59.680344105 CET	49860	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.680532932 CET	49860	443	192.168.2.4	13.107.253.64
Oct 29, 2024 16:59:59.680550098 CET	443	49860	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.033345938 CET	443	49856	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.033862114 CET	49856	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.033885002 CET	443	49856	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.034326077 CET	49856	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.034337997 CET	443	49856	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.077940941 CET	443	49857	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.078536034 CET	49857	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.078560114 CET	443	49857	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.079102993 CET	49857	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.079116106 CET	443	49857	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.139286995 CET	443	49858	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.139822006 CET	49858	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.139844894 CET	443	49858	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.140266895 CET	49858	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.140273094 CET	443	49858	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.175115108 CET	443	49856	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.175201893 CET	443	49856	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.175266981 CET	49856	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.175482035 CET	49856	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.175498962 CET	443	49856	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.175512075 CET	49856	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.175518036 CET	443	49856	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.179272890 CET	49861	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.179332018 CET	443	49861	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.179408073 CET	49861	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.179611921 CET	49861	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.179620981 CET	443	49861	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.215626001 CET	443	49857	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.215689898 CET	443	49857	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.215744972 CET	49857	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.215934992 CET	49857	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.215951920 CET	443	49857	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.215998888 CET	49857	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.216005087 CET	443	49857	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.218559027 CET	49862	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.218605995 CET	443	49862	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.218736887 CET	49862	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.218883038 CET	49862	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.218898058 CET	443	49862	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.244771957 CET	443	49859	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.245300055 CET	49859	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.245322943 CET	443	49859	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.245737076 CET	49859	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.245743990 CET	443	49859	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.278245926 CET	443	49858	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.278316021 CET	443	49858	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.278373003 CET	49858	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.281601906 CET	49858	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.281626940 CET	443	49858	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.281883955 CET	49858	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.281889915 CET	443	49858	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.296217918 CET	49863	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.296245098 CET	443	49863	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.296513081 CET	49863	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.296717882 CET	49863	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.296725035 CET	443	49863	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.385071993 CET	443	49859	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.385138988 CET	443	49859	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.385185003 CET	443	49859	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.385250092 CET	49859	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.386280060 CET	49859	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.386302948 CET	443	49859	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.386322975 CET	49859	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.386327982 CET	443	49859	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.391516924 CET	49864	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.391556025 CET	443	49864	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.391630888 CET	49864	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.392388105 CET	49864	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.392401934 CET	443	49864	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.418669939 CET	443	49805	142.250.184.196	192.168.2.4
Oct 29, 2024 17:00:00.418735981 CET	443	49805	142.250.184.196	192.168.2.4
Oct 29, 2024 17:00:00.418818951 CET	49805	443	192.168.2.4	142.250.184.196
Oct 29, 2024 17:00:00.439711094 CET	443	49860	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.440340042 CET	49860	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.440368891 CET	443	49860	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.441236019 CET	49860	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.441242933 CET	443	49860	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.580214977 CET	443	49860	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.580399990 CET	443	49860	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.580452919 CET	49860	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.580791950 CET	49860	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.580816984 CET	443	49860	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.580832005 CET	49860	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.580838919 CET	443	49860	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.588215113 CET	49865	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.588259935 CET	443	49865	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.588568926 CET	49865	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.589040041 CET	49865	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.589052916 CET	443	49865	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.938759089 CET	443	49861	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.939582109 CET	49861	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.939610004 CET	443	49861	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:00.940399885 CET	49861	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:00.940404892 CET	443	49861	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.014689922 CET	443	49862	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.015292883 CET	49862	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.015331030 CET	443	49862	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.016169071 CET	49862	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.016196966 CET	443	49862	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.055177927 CET	443	49863	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.056132078 CET	49863	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.056144953 CET	443	49863	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.056744099 CET	49863	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.056747913 CET	443	49863	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.080085039 CET	443	49861	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.080193043 CET	443	49861	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.080240965 CET	49861	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.080791950 CET	49861	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.080810070 CET	443	49861	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.080842972 CET	49861	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.080847979 CET	443	49861	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.085587978 CET	49866	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.085639000 CET	443	49866	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.085984945 CET	49866	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.086035013 CET	49866	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.086045027 CET	443	49866	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.150134087 CET	443	49864	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.151339054 CET	49864	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.151366949 CET	443	49864	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.152189970 CET	49864	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.152216911 CET	443	49864	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.161186934 CET	443	49862	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.161252975 CET	443	49862	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.161317110 CET	49862	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.161926985 CET	49862	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.161959887 CET	443	49862	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.161969900 CET	49862	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.161978006 CET	443	49862	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.165529966 CET	49867	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.165564060 CET	443	49867	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.165635109 CET	49867	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.165961027 CET	49867	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.165971994 CET	443	49867	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.192945004 CET	443	49863	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.193026066 CET	443	49863	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.193072081 CET	443	49863	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.193121910 CET	49863	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.193811893 CET	49863	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.193820953 CET	443	49863	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.198337078 CET	49868	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.198379040 CET	443	49868	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.198666096 CET	49868	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.198988914 CET	49868	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.199001074 CET	443	49868	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.288992882 CET	443	49864	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.289067984 CET	443	49864	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.289119005 CET	49864	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.289381981 CET	49864	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.289412975 CET	443	49864	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.289438963 CET	49864	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.289448023 CET	443	49864	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.292248964 CET	49869	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.292294025 CET	443	49869	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.292367935 CET	49869	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.292546988 CET	49869	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.292553902 CET	443	49869	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.354005098 CET	443	49865	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.354500055 CET	49865	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.354537010 CET	443	49865	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.355035067 CET	49865	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.355040073 CET	443	49865	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.492810011 CET	443	49865	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.492840052 CET	443	49865	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.492888927 CET	443	49865	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.492894888 CET	49865	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.492940903 CET	49865	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.498687029 CET	49865	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.498687029 CET	49865	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.498707056 CET	443	49865	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.498717070 CET	443	49865	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.502187967 CET	49870	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.502234936 CET	443	49870	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.502316952 CET	49870	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.502945900 CET	49870	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.502962112 CET	443	49870	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.760266066 CET	49805	443	192.168.2.4	142.250.184.196
Oct 29, 2024 17:00:01.760301113 CET	443	49805	142.250.184.196	192.168.2.4
Oct 29, 2024 17:00:01.903659105 CET	443	49866	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.905478001 CET	49866	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.905494928 CET	443	49866	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.906542063 CET	49866	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.906548977 CET	443	49866	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.928328037 CET	443	49867	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.929003000 CET	49867	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.929024935 CET	443	49867	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.930208921 CET	49867	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.930213928 CET	443	49867	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.990343094 CET	443	49868	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.991547108 CET	49868	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.991569042 CET	443	49868	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:01.992908001 CET	49868	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:01.992919922 CET	443	49868	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.055385113 CET	443	49866	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.055481911 CET	443	49866	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.055569887 CET	49866	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.056292057 CET	49866	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.056313038 CET	443	49866	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.066001892 CET	443	49869	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.066436052 CET	49871	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.066483021 CET	443	49871	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.066694021 CET	49871	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.067481041 CET	49869	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.067498922 CET	443	49869	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.068155050 CET	49869	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.068166971 CET	443	49869	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.068449974 CET	443	49867	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.068506956 CET	443	49867	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.068557024 CET	49867	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.068802118 CET	49871	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.068819046 CET	443	49871	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.069042921 CET	49867	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.069056034 CET	443	49867	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.069065094 CET	49867	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.069068909 CET	443	49867	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.084893942 CET	49872	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.084925890 CET	443	49872	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.085131884 CET	49872	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.085321903 CET	49872	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.085330009 CET	443	49872	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.131175041 CET	443	49868	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.131248951 CET	443	49868	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.131337881 CET	49868	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.143476009 CET	49868	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.143476009 CET	49868	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.143505096 CET	443	49868	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.143517017 CET	443	49868	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.149966955 CET	49873	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.150005102 CET	443	49873	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.150141954 CET	49873	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.161030054 CET	49873	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.161046982 CET	443	49873	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.210170031 CET	443	49869	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.210203886 CET	443	49869	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.210249901 CET	443	49869	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.210303068 CET	49869	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.225312948 CET	49869	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.225342989 CET	443	49869	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.262485981 CET	49874	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.262527943 CET	443	49874	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.262599945 CET	49874	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.263233900 CET	49874	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.263247013 CET	443	49874	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.274133921 CET	443	49870	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.318058968 CET	49870	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.319328070 CET	49870	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.319348097 CET	443	49870	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.320524931 CET	49870	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.320538998 CET	443	49870	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.493855000 CET	443	49870	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.493930101 CET	443	49870	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.494225025 CET	49870	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.495397091 CET	49870	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.495423079 CET	443	49870	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.495434999 CET	49870	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.495441914 CET	443	49870	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.556759119 CET	49875	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.556796074 CET	443	49875	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.556967020 CET	49875	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.557956934 CET	49875	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.557970047 CET	443	49875	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.876499891 CET	443	49871	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.876986980 CET	49871	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.877021074 CET	443	49871	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.877432108 CET	49871	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.877439022 CET	443	49871	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.894562960 CET	443	49872	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.894906044 CET	49872	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.894936085 CET	443	49872	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.895267963 CET	49872	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.895275116 CET	443	49872	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.922189951 CET	443	49873	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.922653913 CET	49873	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.922677994 CET	443	49873	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:02.923093081 CET	49873	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:02.923099995 CET	443	49873	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.024956942 CET	443	49871	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.025060892 CET	443	49871	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.025149107 CET	49871	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.025403023 CET	49871	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.025459051 CET	443	49871	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.025490999 CET	49871	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.025509119 CET	443	49871	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.028552055 CET	49876	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.028604984 CET	443	49876	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.028677940 CET	49876	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.028879881 CET	49876	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.028907061 CET	443	49876	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.036663055 CET	443	49874	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.037192106 CET	49874	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.037224054 CET	443	49874	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.037661076 CET	49874	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.037667990 CET	443	49874	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.045502901 CET	443	49872	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.045577049 CET	443	49872	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.045669079 CET	49872	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.045794010 CET	49872	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.045814037 CET	443	49872	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.045825958 CET	49872	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.045833111 CET	443	49872	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.048638105 CET	49877	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.048681974 CET	443	49877	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.048753977 CET	49877	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.048883915 CET	49877	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.048901081 CET	443	49877	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.078689098 CET	443	49873	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.078715086 CET	443	49873	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.078754902 CET	443	49873	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.078767061 CET	49873	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.078807116 CET	49873	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.080190897 CET	49873	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.080210924 CET	443	49873	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.088856936 CET	49878	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.088893890 CET	443	49878	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.088982105 CET	49878	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.089191914 CET	49878	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.089200020 CET	443	49878	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.194164991 CET	443	49874	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.194339991 CET	443	49874	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.195725918 CET	49874	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.195832014 CET	49874	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.195858002 CET	443	49874	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.195874929 CET	49874	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.195883036 CET	443	49874	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.200647116 CET	49879	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.200680017 CET	443	49879	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.200751066 CET	49879	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.201111078 CET	49879	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.201131105 CET	443	49879	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.349832058 CET	443	49875	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.351016045 CET	49875	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.351032972 CET	443	49875	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.352341890 CET	49875	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.352346897 CET	443	49875	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.491642952 CET	443	49875	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.492945910 CET	443	49875	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.493022919 CET	49875	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.493082047 CET	49875	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.493098021 CET	443	49875	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.493130922 CET	49875	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.493136883 CET	443	49875	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.498878002 CET	49880	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.498943090 CET	443	49880	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.499008894 CET	49880	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.499366045 CET	49880	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.499380112 CET	443	49880	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.801316977 CET	443	49876	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.801899910 CET	49876	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.801978111 CET	443	49876	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.803090096 CET	49876	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.803106070 CET	443	49876	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.820552111 CET	443	49877	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.821614981 CET	49877	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.821630955 CET	443	49877	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.822490931 CET	49877	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.822499037 CET	443	49877	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.860002995 CET	443	49878	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.860392094 CET	49878	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.860430002 CET	443	49878	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.861263990 CET	49878	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.861282110 CET	443	49878	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.941932917 CET	443	49876	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.942028999 CET	443	49876	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.942115068 CET	49876	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.948391914 CET	49876	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.948393106 CET	49876	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.948451996 CET	443	49876	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.948478937 CET	443	49876	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.962924004 CET	443	49877	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.962961912 CET	443	49877	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.963010073 CET	443	49877	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.963023901 CET	49877	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.963330030 CET	49877	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.963973999 CET	443	49879	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.996822119 CET	49881	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.996865034 CET	443	49881	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.996992111 CET	49881	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.997807980 CET	49877	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.997807980 CET	49877	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:03.997833967 CET	443	49877	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.997847080 CET	443	49877	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.999217987 CET	443	49878	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.999284983 CET	443	49878	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:03.999355078 CET	49878	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.001200914 CET	49878	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.001213074 CET	443	49878	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.001224995 CET	49878	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.001230955 CET	443	49878	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.003124952 CET	49879	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.003137112 CET	443	49879	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.003892899 CET	49879	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.003897905 CET	443	49879	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.004729986 CET	49881	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.004751921 CET	443	49881	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.007585049 CET	49882	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.007622004 CET	443	49882	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.007730007 CET	49882	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.007952929 CET	49882	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.007962942 CET	443	49882	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.011306047 CET	49883	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.011348009 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.011600018 CET	49883	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.011841059 CET	49883	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.011852980 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.137867928 CET	443	49879	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.138070107 CET	443	49879	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.138144016 CET	49879	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.138253927 CET	49879	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.138253927 CET	49879	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.138271093 CET	443	49879	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.138279915 CET	443	49879	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.141171932 CET	49884	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.141216993 CET	443	49884	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.141321898 CET	49884	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.141458035 CET	49884	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.141469002 CET	443	49884	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.257225990 CET	443	49880	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.257705927 CET	49880	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.257723093 CET	443	49880	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.258168936 CET	49880	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.258173943 CET	443	49880	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.395663977 CET	443	49880	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.395792961 CET	443	49880	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.395958900 CET	49880	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.396029949 CET	49880	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.396051884 CET	443	49880	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.396064997 CET	49880	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.396070004 CET	443	49880	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.398843050 CET	49885	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.398881912 CET	443	49885	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.399091959 CET	49885	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.399270058 CET	49885	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.399279118 CET	443	49885	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.762343884 CET	443	49881	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.762902021 CET	49881	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.762923002 CET	443	49881	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.763369083 CET	49881	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.763374090 CET	443	49881	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.776315928 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.776696920 CET	49883	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.776717901 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.777098894 CET	49883	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.777108908 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.811424017 CET	443	49882	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.812124014 CET	49882	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.812151909 CET	443	49882	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.813263893 CET	49882	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.813268900 CET	443	49882	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.895930052 CET	443	49884	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.896732092 CET	49884	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.896766901 CET	443	49884	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.897538900 CET	49884	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.897546053 CET	443	49884	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.900608063 CET	443	49881	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.900654078 CET	443	49881	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.900703907 CET	443	49881	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.900710106 CET	49881	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.900749922 CET	49881	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.900954008 CET	49881	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.900969028 CET	443	49881	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.900985003 CET	49881	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.900990009 CET	443	49881	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.903791904 CET	49886	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.903831005 CET	443	49886	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.903903961 CET	49886	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.904069901 CET	49886	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.904082060 CET	443	49886	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.919657946 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.919722080 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.919785976 CET	49883	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.919802904 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.919833899 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.919884920 CET	49883	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.920022964 CET	49883	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.920037031 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.920046091 CET	49883	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.920051098 CET	443	49883	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.922923088 CET	49887	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.922966003 CET	443	49887	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.923043966 CET	49887	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.923168898 CET	49887	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.923180103 CET	443	49887	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.959053040 CET	443	49882	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.959830999 CET	443	49882	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.959897995 CET	49882	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.960011005 CET	49882	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.960031986 CET	443	49882	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.960045099 CET	49882	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.960050106 CET	443	49882	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.962662935 CET	49888	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.962702990 CET	443	49888	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:04.963382959 CET	49888	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.963604927 CET	49888	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:04.963614941 CET	443	49888	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.054455996 CET	443	49884	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.054538012 CET	443	49884	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.054617882 CET	49884	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.054955006 CET	49884	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.054980040 CET	443	49884	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.054994106 CET	49884	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.055001020 CET	443	49884	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.058331013 CET	49889	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.058377981 CET	443	49889	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.058638096 CET	49889	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.059185028 CET	49889	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.059199095 CET	443	49889	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.166299105 CET	443	49885	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.166906118 CET	49885	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.166944981 CET	443	49885	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.167388916 CET	49885	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.167397022 CET	443	49885	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.304013014 CET	443	49885	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.304065943 CET	443	49885	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.304116011 CET	443	49885	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.304127932 CET	49885	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.304182053 CET	49885	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.304343939 CET	49885	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.304367065 CET	443	49885	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.304378033 CET	49885	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.304387093 CET	443	49885	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.307348013 CET	49890	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.307399035 CET	443	49890	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.307552099 CET	49890	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.307813883 CET	49890	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.307823896 CET	443	49890	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.672436953 CET	443	49886	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.673022985 CET	49886	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.673060894 CET	443	49886	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.673530102 CET	49886	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.673537970 CET	443	49886	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.719715118 CET	443	49887	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.720282078 CET	49887	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.720312119 CET	443	49887	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.720750093 CET	49887	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.720755100 CET	443	49887	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.793557882 CET	443	49888	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.794095993 CET	49888	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.794125080 CET	443	49888	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.794559002 CET	49888	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.794567108 CET	443	49888	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.820022106 CET	443	49886	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.820111990 CET	443	49886	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.820179939 CET	49886	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.820420980 CET	49886	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.820440054 CET	443	49886	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.820451975 CET	49886	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.820457935 CET	443	49886	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.823457956 CET	49891	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.823497057 CET	443	49891	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.823568106 CET	49891	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.823740005 CET	49891	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.823753119 CET	443	49891	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.845263004 CET	443	49889	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.845674992 CET	49889	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.845691919 CET	443	49889	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.846118927 CET	49889	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.846127987 CET	443	49889	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.858645916 CET	443	49887	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.858681917 CET	443	49887	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.858728886 CET	443	49887	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.858792067 CET	49887	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.858954906 CET	49887	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.858967066 CET	443	49887	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.858999014 CET	49887	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.859006882 CET	443	49887	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.862724066 CET	49892	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.862765074 CET	443	49892	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.862843990 CET	49892	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.863224983 CET	49892	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.863234997 CET	443	49892	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.935939074 CET	443	49888	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.936111927 CET	443	49888	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.936156034 CET	49888	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.936516047 CET	49888	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.936539888 CET	443	49888	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.936553001 CET	49888	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.936558962 CET	443	49888	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.941242933 CET	49893	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.941293955 CET	443	49893	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.941348076 CET	49893	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.941559076 CET	49893	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.941576958 CET	443	49893	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.982727051 CET	443	49889	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.983200073 CET	443	49889	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.983254910 CET	49889	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.983261108 CET	443	49889	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.983323097 CET	49889	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.983371019 CET	49889	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.983386993 CET	443	49889	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.983397961 CET	49889	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.983407021 CET	443	49889	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.987015963 CET	49894	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.987061977 CET	443	49894	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:05.987124920 CET	49894	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.987320900 CET	49894	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:05.987337112 CET	443	49894	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.101479053 CET	443	49890	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.101994991 CET	49890	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.102031946 CET	443	49890	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.102675915 CET	49890	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.102682114 CET	443	49890	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.235680103 CET	443	49890	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.235840082 CET	443	49890	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.235888004 CET	49890	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.239499092 CET	49890	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.239521027 CET	443	49890	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.239531040 CET	49890	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.239537001 CET	443	49890	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.255219936 CET	49895	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.255266905 CET	443	49895	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.255330086 CET	49895	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.257385015 CET	49895	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.257402897 CET	443	49895	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.613612890 CET	443	49891	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.614167929 CET	49891	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.614182949 CET	443	49891	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.614623070 CET	49891	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.614629030 CET	443	49891	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.622936010 CET	443	49892	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.623271942 CET	49892	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.623284101 CET	443	49892	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.623639107 CET	49892	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.623642921 CET	443	49892	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.704909086 CET	443	49893	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.705794096 CET	49893	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.705794096 CET	49893	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.705816984 CET	443	49893	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.705838919 CET	443	49893	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.752413988 CET	443	49891	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.752495050 CET	443	49891	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.752753019 CET	49891	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.752859116 CET	49891	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.752859116 CET	49891	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.752871990 CET	443	49891	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.752878904 CET	443	49891	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.753813982 CET	443	49894	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.754785061 CET	49894	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.754865885 CET	443	49894	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.754890919 CET	49894	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.754919052 CET	443	49894	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.755388021 CET	49896	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.755433083 CET	443	49896	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.755935907 CET	49896	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.755935907 CET	49896	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.755981922 CET	443	49896	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.759658098 CET	443	49892	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.759809971 CET	443	49892	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.759932995 CET	49892	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.759932995 CET	49892	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.760171890 CET	49892	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.760198116 CET	443	49892	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.762171030 CET	49897	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.762209892 CET	443	49897	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.762342930 CET	49897	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.762547970 CET	49897	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.762562990 CET	443	49897	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.844535112 CET	443	49893	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.844613075 CET	443	49893	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.844750881 CET	443	49893	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.844875097 CET	49893	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.845007896 CET	49893	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.845026970 CET	443	49893	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.845058918 CET	49893	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.845067024 CET	443	49893	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.848213911 CET	49898	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.848264933 CET	443	49898	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.848653078 CET	49898	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.848653078 CET	49898	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.848690033 CET	443	49898	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.891113997 CET	443	49894	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.891215086 CET	443	49894	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.891515017 CET	49894	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.891515017 CET	49894	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.891633034 CET	49894	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.891680956 CET	443	49894	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.894423962 CET	49899	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.894469976 CET	443	49899	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:06.894623041 CET	49899	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.894782066 CET	49899	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:06.894793034 CET	443	49899	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.016725063 CET	443	49895	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.017399073 CET	49895	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.017438889 CET	443	49895	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.018337011 CET	49895	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.018358946 CET	443	49895	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.156721115 CET	443	49895	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.157079935 CET	443	49895	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.157138109 CET	443	49895	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.157258034 CET	49895	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.157388926 CET	49895	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.157396078 CET	443	49895	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.157406092 CET	49895	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.157409906 CET	443	49895	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.160486937 CET	49900	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.160531044 CET	443	49900	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.160953045 CET	49900	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.160994053 CET	49900	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.161000013 CET	443	49900	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.511775017 CET	443	49896	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.512856960 CET	49896	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.512856960 CET	49896	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.512897015 CET	443	49896	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.512912989 CET	443	49896	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.524035931 CET	443	49897	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.524857044 CET	49897	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.524857044 CET	49897	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.524888992 CET	443	49897	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.524916887 CET	443	49897	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.626861095 CET	443	49898	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.627564907 CET	49898	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.627595901 CET	443	49898	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.628199100 CET	49898	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.628211975 CET	443	49898	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.648571014 CET	443	49896	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.648649931 CET	443	49896	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.648761988 CET	49896	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.649030924 CET	49896	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.649030924 CET	49896	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.649049044 CET	443	49896	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.649060965 CET	443	49896	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.649688959 CET	443	49899	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.650132895 CET	49899	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.650158882 CET	443	49899	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.652261972 CET	49901	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.652264118 CET	49899	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.652285099 CET	443	49899	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.652304888 CET	443	49901	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.652616024 CET	49901	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.652659893 CET	49901	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.652667999 CET	443	49901	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.662669897 CET	443	49897	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.662908077 CET	443	49897	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.663032055 CET	49897	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.663032055 CET	49897	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.663693905 CET	49897	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.663718939 CET	443	49897	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.665991068 CET	49902	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.666028023 CET	443	49902	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.666122913 CET	49902	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.666285038 CET	49902	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.666299105 CET	443	49902	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.767992973 CET	443	49898	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.768079042 CET	443	49898	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.768230915 CET	49898	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.768533945 CET	49898	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.768553972 CET	443	49898	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.768568039 CET	49898	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.768573046 CET	443	49898	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.771825075 CET	49903	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.771862030 CET	443	49903	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.772109032 CET	49903	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.772306919 CET	49903	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.772316933 CET	443	49903	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.790308952 CET	443	49899	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.790338993 CET	443	49899	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.790388107 CET	443	49899	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.790411949 CET	49899	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.790462971 CET	49899	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.790735006 CET	49899	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.790752888 CET	443	49899	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.790785074 CET	49899	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.790791035 CET	443	49899	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.794236898 CET	49904	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.794290066 CET	443	49904	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.794394016 CET	49904	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.794668913 CET	49904	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.794687986 CET	443	49904	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.912275076 CET	443	49900	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.912825108 CET	49900	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.912875891 CET	443	49900	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:07.913491964 CET	49900	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:07.913506031 CET	443	49900	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.057693958 CET	443	49900	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.057780981 CET	443	49900	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.057862043 CET	49900	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.058258057 CET	49900	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.058284044 CET	443	49900	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.058298111 CET	49900	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.058305025 CET	443	49900	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.061455011 CET	49905	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.061491966 CET	443	49905	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.061557055 CET	49905	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.061682940 CET	49905	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.061695099 CET	443	49905	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.415867090 CET	443	49902	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.416445971 CET	49902	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.416471004 CET	443	49902	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.417062044 CET	49902	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.417069912 CET	443	49902	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.487407923 CET	443	49901	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.488065958 CET	49901	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.488104105 CET	443	49901	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.489058971 CET	49901	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.489067078 CET	443	49901	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.532787085 CET	443	49903	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.533413887 CET	49903	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.533441067 CET	443	49903	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.534014940 CET	49903	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.534027100 CET	443	49903	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.554110050 CET	443	49902	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.554194927 CET	443	49902	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.554388046 CET	49902	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.554478884 CET	49902	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.554507017 CET	443	49902	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.554521084 CET	49902	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.554527998 CET	443	49902	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.556231022 CET	443	49904	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.557610989 CET	49904	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.557626009 CET	443	49904	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.558108091 CET	49906	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.558146000 CET	443	49906	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.558206081 CET	49906	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.558233976 CET	49904	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.558238029 CET	443	49904	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.558362007 CET	49906	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.558373928 CET	443	49906	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.635380983 CET	443	49901	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.636352062 CET	443	49901	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.636430025 CET	443	49901	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.636553049 CET	49901	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.636636019 CET	49901	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.636657953 CET	443	49901	13.107.253.64	192.168.2.4
Oct 29, 2024 17:00:08.636672020 CET	49901	443	192.168.2.4	13.107.253.64
Oct 29, 2024 17:00:08.636677980 CET	443	49901	13.107.253.64	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 16:58:44.766258955 CET	53	61369	1.1.1.1	192.168.2.4
Oct 29, 2024 16:58:45.308460951 CET	53	55912	1.1.1.1	192.168.2.4
Oct 29, 2024 16:58:46.709197998 CET	55175	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:58:46.709384918 CET	63157	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:58:46.874170065 CET	53	53964	1.1.1.1	192.168.2.4
Oct 29, 2024 16:58:46.874191999 CET	53	63157	1.1.1.1	192.168.2.4
Oct 29, 2024 16:58:46.877521038 CET	53	55175	1.1.1.1	192.168.2.4
Oct 29, 2024 16:58:49.511765957 CET	54610	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:58:49.511936903 CET	59665	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:58:49.519426107 CET	53	54610	1.1.1.1	192.168.2.4
Oct 29, 2024 16:58:49.519449949 CET	53	59665	1.1.1.1	192.168.2.4
Oct 29, 2024 16:58:50.418335915 CET	55466	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:58:50.419498920 CET	52866	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:58:50.429665089 CET	53	55466	1.1.1.1	192.168.2.4
Oct 29, 2024 16:58:50.430388927 CET	53	52866	1.1.1.1	192.168.2.4
Oct 29, 2024 16:59:00.999068975 CET	138	138	192.168.2.4	192.168.2.255
Oct 29, 2024 16:59:03.879504919 CET	53	54467	1.1.1.1	192.168.2.4
Oct 29, 2024 16:59:22.499104977 CET	53	54852	1.1.1.1	192.168.2.4
Oct 29, 2024 16:59:44.705265999 CET	53	50313	1.1.1.1	192.168.2.4
Oct 29, 2024 16:59:45.365469933 CET	53	56046	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 29, 2024 16:59:11.184452057 CET	192.168.2.4	1.1.1.1	c250	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 29, 2024 16:58:46.709197998 CET	192.168.2.4	1.1.1.1	0x911c	Standard query (0)	u47860934.ct.sendgrid.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:46.709384918 CET	192.168.2.4	1.1.1.1	0x9c6c	Standard query (0)	u47860934.ct.sendgrid.net	65	IN (0x0001)	false
Oct 29, 2024 16:58:49.511765957 CET	192.168.2.4	1.1.1.1	0x9bef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:49.511936903 CET	192.168.2.4	1.1.1.1	0x5b04	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 29, 2024 16:58:50.418335915 CET	192.168.2.4	1.1.1.1	0xd377	Standard query (0)	u47860934.ct.sendgrid.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:50.419498920 CET	192.168.2.4	1.1.1.1	0x77a2	Standard query (0)	u47860934.ct.sendgrid.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 29, 2024 16:58:46.877521038 CET	1.1.1.1	192.168.2.4	0x911c	No error (0)	u47860934.ct.sendgrid.net		167.89.115.147	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:46.877521038 CET	1.1.1.1	192.168.2.4	0x911c	No error (0)	u47860934.ct.sendgrid.net		167.89.115.121	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:46.877521038 CET	1.1.1.1	192.168.2.4	0x911c	No error (0)	u47860934.ct.sendgrid.net		167.89.115.26	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:46.877521038 CET	1.1.1.1	192.168.2.4	0x911c	No error (0)	u47860934.ct.sendgrid.net		167.89.115.54	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:46.877521038 CET	1.1.1.1	192.168.2.4	0x911c	No error (0)	u47860934.ct.sendgrid.net		167.89.115.58	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:46.877521038 CET	1.1.1.1	192.168.2.4	0x911c	No error (0)	u47860934.ct.sendgrid.net		167.89.115.35	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:49.519426107 CET	1.1.1.1	192.168.2.4	0x9bef	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:49.519449949 CET	1.1.1.1	192.168.2.4	0x5b04	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 29, 2024 16:58:50.429665089 CET	1.1.1.1	192.168.2.4	0xd377	No error (0)	u47860934.ct.sendgrid.net		167.89.115.58	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:50.429665089 CET	1.1.1.1	192.168.2.4	0xd377	No error (0)	u47860934.ct.sendgrid.net		167.89.115.35	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:50.429665089 CET	1.1.1.1	192.168.2.4	0xd377	No error (0)	u47860934.ct.sendgrid.net		167.89.115.26	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:50.429665089 CET	1.1.1.1	192.168.2.4	0xd377	No error (0)	u47860934.ct.sendgrid.net		167.89.115.54	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:50.429665089 CET	1.1.1.1	192.168.2.4	0xd377	No error (0)	u47860934.ct.sendgrid.net		167.89.115.147	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:50.429665089 CET	1.1.1.1	192.168.2.4	0xd377	No error (0)	u47860934.ct.sendgrid.net		167.89.115.121	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:58:56.766442060 CET	1.1.1.1	192.168.2.4	0x2b29	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:58:56.766442060 CET	1.1.1.1	192.168.2.4	0x2b29	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:59:11.181298971 CET	1.1.1.1	192.168.2.4	0x4e64	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:59:11.181298971 CET	1.1.1.1	192.168.2.4	0x4e64	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:59:11.184372902 CET	1.1.1.1	192.168.2.4	0x4e64	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:59:11.184372902 CET	1.1.1.1	192.168.2.4	0x4e64	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:59:37.576700926 CET	1.1.1.1	192.168.2.4	0x5a7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:59:37.576700926 CET	1.1.1.1	192.168.2.4	0x5a7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:59:39.520797968 CET	1.1.1.1	192.168.2.4	0xbcdd	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:59:39.520797968 CET	1.1.1.1	192.168.2.4	0xbcdd	No error (0)	dual.s-part-0036.t-0009.fb-t-msedge.net	s-part-0036.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:59:39.520797968 CET	1.1.1.1	192.168.2.4	0xbcdd	No error (0)	s-part-0036.t-0009.fb-t-msedge.net		13.107.253.64	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:59:58.250458002 CET	1.1.1.1	192.168.2.4	0x7b15	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:59:58.250458002 CET	1.1.1.1	192.168.2.4	0x7b15	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

u47860934.ct.sendgrid.net

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	167.89.115.147	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:47 UTC	1807	OUT	GET /asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8 [TRUNCATED] Host: u47860934.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:58:48 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Oct 2024 15:58:47 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: script-src 'self' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block
2024-10-29 15:58:48 UTC	2065	IN	Data Raw: 38 30 35 0d 0a 0a 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 6e 73 75 62 73 63 72 69 62 65 20 50 72 65 66 65 72 65 6e 63 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 Data Ascii: 805 <!DOCTYPE html> <html> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Unsubscribe Preferences</title> <meta name="viewport" content="width=device-width, initial-scale=1"> <li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	167.89.115.147	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:48 UTC	534	OUT	GET /asm/assets/stylesheets/app.css HTTP/1.1 Host: u47860934.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:58:48 UTC	422	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Oct 2024 15:58:48 GMT Content-Type: text/css; charset=utf-8 Content-Length: 10625 Connection: close Accept-Ranges: bytes Content-Security-Policy: script-src 'self' Last-Modified: Thu, 27 Jun 2024 18:32:29 GMT Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block
2024-10-29 15:58:48 UTC	10625	IN	Data Raw: 2f 2a 20 47 6c 6f 62 61 6c 20 73 74 79 6c 65 73 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 43 6f 6c 66 61 78 22 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2f 61 73 6d 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 63 6f 6c 66 61 78 2d 6c 69 67 68 74 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 22 2f 61 73 6d 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 63 6f 6c 66 61 78 2d 6c 69 67 68 74 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f Data Ascii: /* Global styles */@font-face { font-family: "Colfax"; font-style: normal; font-weight: 300; src: url("/asm/assets/fonts/colfax-light.woff2") format("woff2"), url("/asm/assets/fonts/colfax-light.woff") format("woff");}@font-face { fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	167.89.115.147	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:49 UTC	564	OUT	GET /asm/assets/fonts/colfax-medium.woff2 HTTP/1.1 Host: u47860934.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://u47860934.ct.sendgrid.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:58:49 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Oct 2024 15:58:49 GMT Content-Type: font/woff Content-Length: 20276 Connection: close Accept-Ranges: bytes Content-Security-Policy: script-src 'self' Last-Modified: Thu, 27 Jun 2024 18:32:29 GMT Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block
2024-10-29 15:58:49 UTC	15976	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4f 34 00 0f 00 00 00 00 e6 74 00 00 4e d2 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 1b 81 8c 3c 1c 81 52 06 60 00 87 06 11 08 0a 81 ff 00 81 c0 58 0b 86 44 00 01 36 02 24 03 8d 04 04 20 05 8e 0e 07 92 66 1b ff c2 57 d0 db f7 04 2a dc 0e f0 3b ce f7 23 54 4c b7 79 88 dc ad 2a 30 27 4e 9c 19 30 a3 ac e2 ec ff ff ff d3 92 ca 18 da 04 4c 4b 15 41 d5 dd ed 20 22 10 f1 68 1e d0 32 33 57 db fa 6a b9 c3 98 47 da b1 e7 19 3d 8f b8 d6 d5 da 75 cf 4c 7b b2 a4 f3 cf e2 b6 dd 2e a1 db 1f bb 0b bc fa e4 09 ef 6b 37 0c aa ea 1b d7 69 01 1b 6c 07 34 7c 76 da ad db 8b 4e bf a2 d2 af 91 88 9d 79 0c 3a 8b a7 e8 ae e2 af 68 17 6b d8 be 71 92 0f 08 46 f2 c1 7b ad 28 79 e1 a7 03 56 3b ad 43 2f Data Ascii: wOF2O4tN?FFTM<R`XD6$ fW;#TLy0'N0LKA "h23WjG=uL{.k7il4\|vNy:hkqF{(yV;C/
2024-10-29 15:58:49 UTC	4300	IN	Data Raw: ee cb 87 14 40 80 53 5c 41 22 c3 c8 90 14 48 e4 5b 66 8c 77 a7 4b 73 7a 32 ac 99 77 25 3d 6c 7c 69 14 98 0b 54 0a 90 6c 89 f7 01 30 72 46 b6 1e d8 5a 82 db 9e dc ad e3 4f 2f a0 46 63 a2 ed e2 8e 13 19 12 18 64 35 c4 1e 07 fd f3 fe 6b a2 50 89 18 16 10 14 08 b1 c6 90 ef ac d1 e1 9d 42 28 9a b6 19 83 9b 50 d3 7e 17 2b 9f 67 82 7e f8 0a 77 7d d8 d8 2f 4f a9 36 a5 1a 09 fa ef 2b d9 64 f4 89 83 e5 3c 16 73 fc 9b 0d 2c 3d fb 79 c3 b9 f6 6d 8c 5f 42 b3 5e f4 7c a8 83 04 ff 7b da 50 9c 8f 42 e7 29 07 89 00 ba ff c0 68 0f 94 3f 2b 7f 90 9a 04 be a3 41 61 ca 72 11 c2 48 bd 8e f7 6d c5 98 55 8a 68 76 72 3c f7 f3 cd f4 08 81 e9 6b b7 a0 d9 47 6f c7 bc f5 8d 4f c0 fb 5c 97 75 a5 f1 ef f9 ae f9 7c e3 7b 0f 09 65 96 c8 de 10 a7 2b dd 00 00 4d 91 65 b3 07 d4 32 01 00 97 Data Ascii: @S\A"H[fwKsz2w%=l\|iTl0rFZO/Fcd5kPB(P~+g~w}/O6+d<s,=ym_B^\|{PB)h?+AarHmUhvr<kGoO\u\|{e+Me2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	167.89.115.147	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:49 UTC	565	OUT	GET /asm/assets/fonts/colfax-regular.woff2 HTTP/1.1 Host: u47860934.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://u47860934.ct.sendgrid.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:58:49 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Oct 2024 15:58:49 GMT Content-Type: font/woff Content-Length: 20388 Connection: close Accept-Ranges: bytes Content-Security-Policy: script-src 'self' Last-Modified: Thu, 27 Jun 2024 18:32:29 GMT Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block
2024-10-29 15:58:49 UTC	15976	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4f a4 00 0f 00 00 00 00 e8 90 00 00 4f 44 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 1b 81 8d 4c 1c 81 52 06 60 00 87 06 11 08 0a 82 81 7c 81 c3 2e 0b 86 44 00 01 36 02 24 03 8d 04 04 20 05 8e 1d 07 92 66 1b f4 c4 09 90 6b 6c 8f 9c 32 2c ab 74 93 01 af a9 6b 99 79 23 df 91 08 dd 0e 48 82 52 4f 9e 8d 88 91 79 00 a4 ce f7 59 f6 ff ff ff 7f 5e 52 19 43 d3 c8 d2 02 80 a0 73 ba fd 56 1e b9 14 94 2a 08 de d0 c7 6e 02 39 13 1f d3 2c 53 c2 56 53 f8 c1 db f9 5e 97 4c 40 92 ec b8 e6 2a b6 48 90 95 4c 98 ec 1f 65 bd 52 d3 e6 26 7a 8a 0d d2 5c f4 22 11 f4 4e ff 6c 6e 9d 9e f7 21 bc 85 f8 1e c4 f9 4f 09 82 e9 8f df f6 b4 75 f9 4d e2 a1 12 57 f2 33 cf eb 36 19 05 4e 84 cc 54 e1 d6 f1 63 Data Ascii: wOF2OOD?FFTMLR`\|.D6$ fkl2,tky#HROyY^RCsVn9,SVS^L@HLeR&z\"Nln!OuMW36NTc
2024-10-29 15:58:49 UTC	4412	IN	Data Raw: e2 44 bc 8b 39 a2 cc 3a 12 70 ab c4 2b c9 5b 4e 6a 0f 1c d9 93 d6 cf 74 82 c7 1e 36 e0 45 45 c0 27 63 7e 76 43 c8 c3 3a 26 65 af 13 af ab 75 12 8a 24 85 13 83 6f 25 b1 93 a8 ab 76 75 2d 08 16 90 44 1a 44 b3 9a b4 7a db 73 10 81 5d f9 b5 1d f3 c9 91 8d b9 2e fb 2d 3a 14 0f 20 5d fa 02 a2 92 c9 28 1c 3c 52 1e 29 3f e8 4c 7d 04 67 80 33 d7 5c 48 f8 31 36 2d 0c 6e 4e 85 0f c7 37 3a 01 93 47 4c 01 4d 47 0e 9a 41 05 08 50 7a 4f 71 f0 c5 87 29 3a 1c eb 26 06 e2 88 0e ab cf 25 c5 e8 64 c1 e8 29 9a 87 c2 e9 b4 da cb 5b fb 97 4e 32 d8 2b 94 cb 32 e9 a6 ab 24 c7 32 fd d0 1e 73 cc 0d 90 e7 5b fc fe fa 9f 20 f8 cc 2b ee 44 ef af 4f d5 cd 81 66 05 f2 b2 aa b4 ae 33 eb b2 15 fa 1f 04 a1 5b ef ce e8 71 ff 07 bc df 15 41 c1 9b 25 23 8c 7b 43 24 af 20 9a ff 3d d1 1f 76 7c Data Ascii: D9:p+[Njt6EE'c~vC:&eu$o%vu-DDzs].-: ](<R)?L}g3\H16-nN7:GLMGAPzOq):&%d)[N2+2$2s[ +DOf3[qA%#{C$ =v\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	167.89.115.147	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:49 UTC	519	OUT	GET /asm/assets/javascripts/app.js HTTP/1.1 Host: u47860934.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:58:49 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Oct 2024 15:58:49 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 635 Connection: close Accept-Ranges: bytes Content-Security-Policy: script-src 'self' Last-Modified: Thu, 27 Jun 2024 18:32:29 GMT Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block
2024-10-29 15:58:49 UTC	635	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 62 74 6e 2d 74 6f 67 67 6c 65 27 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 6c 29 20 7b 0a 20 20 20 20 65 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 74 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 54 6f 67 67 6c 65 20 76 69 73 75 61 6c 20 73 74 61 74 65 0a 20 20 20 20 20 20 65 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 27 62 74 6e 2d 74 6f 67 67 6c 65 2d 6f 6e 73 74 61 74 65 27 29 0a 20 20 20 20 20 20 65 6c 2e 63 6c 61 73 73 4c 69 Data Ascii: window.addEventListener('load', function() { document.querySelectorAll('.btn-toggle').forEach(function (el) { el.addEventListener('click', function (evt) { // Toggle visual state el.classList.toggle('btn-toggle-onstate') el.classLi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	167.89.115.147	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:49 UTC	579	OUT	GET /asm/assets/images/success.png HTTP/1.1 Host: u47860934.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:58:49 UTC	407	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Oct 2024 15:58:49 GMT Content-Type: image/png Content-Length: 2199 Connection: close Accept-Ranges: bytes Content-Security-Policy: script-src 'self' Last-Modified: Thu, 27 Jun 2024 18:32:29 GMT Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block
2024-10-29 15:58:49 UTC	2199	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 38 00 00 00 38 08 06 00 00 00 a8 86 3b 1e 00 00 08 5e 49 44 41 54 68 05 dd 5b 6b 6c 15 45 14 9e 99 dd db 0b c6 0a 42 50 13 43 42 48 50 7c a1 01 52 a5 50 0c 3e e2 2b 20 fa 03 7f 28 46 63 94 47 e2 db d0 62 4d 0c 51 c8 6d 83 44 63 02 a8 f1 11 05 8d fc 50 5a 22 6a 6a 34 52 a8 52 d4 88 28 22 26 84 d8 90 f8 88 08 a9 11 da de 9d f1 7c 73 bb bd d3 d9 d9 7b b7 b7 b7 8f b0 49 b3 b3 67 66 ce 7c df dd d9 33 67 ce 99 72 a5 14 2b e7 c5 97 2c f1 aa 67 8e 9f 29 b8 5f c3 18 9f ce b8 9a ce 15 9b 4c e5 4a c5 54 25 c6 e2 8c 77 32 a6 3a 15 67 1d 4c f1 43 54 3e 24 55 b6 b5 ed bb 13 df a9 6d db 82 b2 e2 29 07 41 be 6c 59 aa 7a 2a bf 55 30 ef 1e c1 d4 8d 4c 88 71 25 81 94 f2 a4 64 bc 45 b2 60 4b db 11 b5 53 bd f2 4a 4f 49 Data Ascii: PNGIHDR88;^IDATh[klEBPCBHP\|RP>+ (FcGbMQmDcPZ"jj4RR("&\|s{Igf\|3gr+,g)_LJT%w2:gLCT>$Um)AlYz*U0Lq%dE`KSJOI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	167.89.115.147	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:50 UTC	561	OUT	GET /favicon.ico HTTP/1.1 Host: u47860934.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:58:50 UTC	143	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 29 Oct 2024 15:58:50 GMT Content-Type: text/html Content-Length: 564 Connection: close
2024-10-29 15:58:50 UTC	564	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	167.89.115.58	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:51 UTC	378	OUT	GET /asm/assets/javascripts/app.js HTTP/1.1 Host: u47860934.ct.sendgrid.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:58:51 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Oct 2024 15:58:51 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 635 Connection: close Accept-Ranges: bytes Content-Security-Policy: script-src 'self' Last-Modified: Thu, 27 Jun 2024 18:32:29 GMT Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block
2024-10-29 15:58:51 UTC	635	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 62 74 6e 2d 74 6f 67 67 6c 65 27 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 6c 29 20 7b 0a 20 20 20 20 65 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 74 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 54 6f 67 67 6c 65 20 76 69 73 75 61 6c 20 73 74 61 74 65 0a 20 20 20 20 20 20 65 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 27 62 74 6e 2d 74 6f 67 67 6c 65 2d 6f 6e 73 74 61 74 65 27 29 0a 20 20 20 20 20 20 65 6c 2e 63 6c 61 73 73 4c 69 Data Ascii: window.addEventListener('load', function() { document.querySelectorAll('.btn-toggle').forEach(function (el) { el.addEventListener('click', function (evt) { // Toggle visual state el.classList.toggle('btn-toggle-onstate') el.classLi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	167.89.115.58	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:51 UTC	378	OUT	GET /asm/assets/images/success.png HTTP/1.1 Host: u47860934.ct.sendgrid.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:58:51 UTC	407	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Oct 2024 15:58:51 GMT Content-Type: image/png Content-Length: 2199 Connection: close Accept-Ranges: bytes Content-Security-Policy: script-src 'self' Last-Modified: Thu, 27 Jun 2024 18:32:29 GMT Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block
2024-10-29 15:58:51 UTC	2199	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 38 00 00 00 38 08 06 00 00 00 a8 86 3b 1e 00 00 08 5e 49 44 41 54 68 05 dd 5b 6b 6c 15 45 14 9e 99 dd db 0b c6 0a 42 50 13 43 42 48 50 7c a1 01 52 a5 50 0c 3e e2 2b 20 fa 03 7f 28 46 63 94 47 e2 db d0 62 4d 0c 51 c8 6d 83 44 63 02 a8 f1 11 05 8d fc 50 5a 22 6a 6a 34 52 a8 52 d4 88 28 22 26 84 d8 90 f8 88 08 a9 11 da de 9d f1 7c 73 bb bd d3 d9 d9 7b b7 b7 b7 8f b0 49 b3 b3 67 66 ce 7c df dd d9 33 67 ce 99 72 a5 14 2b e7 c5 97 2c f1 aa 67 8e 9f 29 b8 5f c3 18 9f ce b8 9a ce 15 9b 4c e5 4a c5 54 25 c6 e2 8c 77 32 a6 3a 15 67 1d 4c f1 43 54 3e 24 55 b6 b5 ed bb 13 df a9 6d db 82 b2 e2 29 07 41 be 6c 59 aa 7a 2a bf 55 30 ef 1e c1 d4 8d 4c 88 71 25 81 94 f2 a4 64 bc 45 b2 60 4b db 11 b5 53 bd f2 4a 4f 49 Data Ascii: PNGIHDR88;^IDATh[klEBPCBHP\|RP>+ (FcGbMQmDcPZ"jj4RR("&\|s{Igf\|3gr+,g)_LJT%w2:gLCT>$Um)AlYz*U0Lq%dE`KSJOI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 15:58:51 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=75357 Date: Tue, 29 Oct 2024 15:58:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:58:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 15:58:53 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=75409 Date: Tue, 29 Oct 2024 15:58:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-29 15:58:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	167.89.115.147	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:08 UTC	1912	OUT	POST /asm/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6I [TRUNCATED] Host: u47860934.ct.sendgrid.net Connection: keep-alive Content-Length: 11 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:59:08 UTC	11	OUT	Data Raw: 6f 70 74 2d 69 6e 3d 74 72 75 65 Data Ascii: opt-in=true
2024-10-29 15:59:08 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Oct 2024 15:59:08 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: script-src 'self' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block
2024-10-29 15:59:08 UTC	4792	IN	Data Raw: 65 64 36 0d 0a 0a 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 6e 73 75 62 73 63 72 69 62 65 20 50 72 65 66 65 72 65 6e 63 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 Data Ascii: ed6 <!DOCTYPE html> <html> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Unsubscribe Preferences</title> <meta name="viewport" content="width=device-width, initial-scale=1"> <li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	167.89.115.147	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:28 UTC	1912	OUT	POST /asm/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6I [TRUNCATED] Host: u47860934.ct.sendgrid.net Connection: keep-alive Content-Length: 20 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:59:28 UTC	20	OUT	Data Raw: 31 33 33 33 34 38 2e 68 69 64 64 65 6e 3d 63 68 67 2d 64 62 Data Ascii: 133348.hidden=chg-db
2024-10-29 15:59:28 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Oct 2024 15:59:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: script-src 'self' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block
2024-10-29 15:59:28 UTC	4792	IN	Data Raw: 65 64 36 0d 0a 0a 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 6e 73 75 62 73 63 72 69 62 65 20 50 72 65 66 65 72 65 6e 63 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 Data Ascii: ed6 <!DOCTYPE html> <html> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Unsubscribe Preferences</title> <meta name="viewport" content="width=device-width, initial-scale=1"> <li

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49759	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:40 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:40 UTC	561	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:40 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155940Z-r1755647c66gqcpzhw8q9nhnq000000007mg000000001dr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:40 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-29 15:59:40 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-29 15:59:40 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-29 15:59:40 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-29 15:59:41 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-29 15:59:41 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-29 15:59:41 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-29 15:59:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-29 15:59:41 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-29 15:59:41 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49763	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:42 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:42 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:42 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c4ab37c7-901e-002a-3417-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155942Z-17fbfdc98bb5d4fn785en176rg00000006q000000000dsxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:42 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49760	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:42 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:42 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:42 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155942Z-17fbfdc98bbjwdgn5g1mr5hcxn00000004r00000000032f1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:42 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49761	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:42 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:42 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:42 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155942Z-17fbfdc98bb6vp4m3kc0kte9cs00000007fg00000000b412 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:42 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49764	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:42 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:42 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:42 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155942Z-17fbfdc98bbsw6nnfh43fuwvyn00000004wg000000006ssw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:42 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49762	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:42 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:42 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155942Z-r1755647c66x7vzx9armv8e3cw00000008g0000000001m31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:42 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49765	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:43 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:43 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:43 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1041074d-101e-0034-30b5-2596ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155943Z-r1755647c66tgwsmrrc4e69sk000000005yg00000000dpdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:43 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49768	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:43 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:43 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:43 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 8abc48b9-201e-0096-2f4f-28ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155943Z-r1755647c66gqcpzhw8q9nhnq000000007d000000000etpw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:43 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49766	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:43 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:43 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:43 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155943Z-r1755647c66trqwgqbys9wk81g000000057g00000000e256 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49769	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:43 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:43 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:43 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d6813257-101e-0034-034f-2896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155943Z-17fbfdc98bbz4mxcabnudsmquw00000005q000000000cw3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:43 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49767	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:43 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:43 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:43 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: bbf1142f-f01e-0085-589b-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155943Z-r1755647c66vpf8fnbgmzm21hs00000007n000000000edxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49772	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:44 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: fcb0891e-801e-007b-6669-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155944Z-r1755647c664nptf1txg2psens00000005mg000000005v9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49771	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:44 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9985b9b7-a01e-0021-5827-28814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155944Z-r1755647c66pzcrw3ktqe96x2s00000008400000000004nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49773	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:44 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:44 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f6d6c722-a01e-00ab-371c-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155944Z-17fbfdc98bblfj7gw4f18guu28000000084000000000c3ub x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49770	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:44 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:44 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f66eff46-601e-0084-3c9d-276b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155944Z-17fbfdc98bb6kklk3r0qwaavtw00000004q000000000a7cu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49774	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:44 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: abb1733e-f01e-005d-6a3c-2813ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155944Z-r1755647c66trqwgqbys9wk81g000000056g00000000f80g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49775	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:45 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:45 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 898be286-601e-003d-2804-276f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155945Z-17fbfdc98bbh7l5skzh3rekksc000000081g00000000e6xt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:45 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49777	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:45 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:45 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155945Z-r1755647c666s72wx0z5rz6s6000000007w0000000002sy3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49778	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:45 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:45 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:45 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 214ea441-b01e-00ab-0e9b-27dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155945Z-17fbfdc98bb9cv5m0pampz446s000000062000000000ea7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:45 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49776	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:45 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:45 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 77b1f39f-101e-0079-106b-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155945Z-17fbfdc98bbx59j5xd9kpbrs8400000006b0000000000y15 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49779	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:45 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:45 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:45 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 7bd8c047-e01e-000c-239d-278e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155945Z-17fbfdc98bb6vp4m3kc0kte9cs00000007mg000000002grb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:45 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49782	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:46 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 338c7fbe-d01e-0028-7d3c-287896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155946Z-r1755647c66qg7mpa8m0fzcvy0000000080g000000001nuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49781	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:46 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:46 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155946Z-r1755647c66z67vn9nc21z11a8000000066g0000000041yu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49783	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:46 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:46 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f99c795-b01e-0097-3bfd-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155946Z-17fbfdc98bbdbgkb6uyh3q4ue4000000062g00000000bh5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:46 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49784	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:46 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:46 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: c80232df-501e-00a3-48ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155946Z-r1755647c66ldhdjeavapf4fd000000006rg00000000cnen x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49787	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:47 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:47 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0883ffbf-f01e-001f-3811-295dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155947Z-r1755647c66kcsqh9hy6eyp6kw000000051g0000000044zb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:47 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49786	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:47 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:47 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:47 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155947Z-r1755647c668lcmr2va34xxa5s00000005a000000000e6yf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:47 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49789	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:47 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 128a8aa7-901e-005b-27fd-272005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155947Z-17fbfdc98bblzxqcphe71tp4qw0000000230000000009tzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49788	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:47 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:47 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:47 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 08308beb-701e-001e-43b0-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155947Z-r1755647c66mrgwz6d897uymaw00000000m000000000bz63 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:47 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49785	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:47 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:47 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:47 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 2d06c87c-b01e-0021-139b-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155947Z-17fbfdc98bbbnx4ldgze4de5zs000000058000000000d9az x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:47 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49790	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:48 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:48 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:48 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 45317ed5-a01e-0098-2767-288556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155948Z-r1755647c668lcmr2va34xxa5s00000005bg00000000bbsf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:48 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49791	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:48 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:48 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8e3eac93-d01e-0017-759c-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155948Z-r1755647c66t77qv3m6k1gb3zw00000006dg000000007515 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:48 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49792	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:48 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:48 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: cbc8156d-001e-0079-70f5-2512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155948Z-r1755647c66bdj57qqnd8h5hp800000007bg00000000afnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:48 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49793	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:48 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b953619b-001e-0017-7a89-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155948Z-r1755647c66vpf8fnbgmzm21hs00000007m000000000dtxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49794	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:48 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:48 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155948Z-17fbfdc98bb2cvg4m0cmab3ecw00000005e000000000aqw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:48 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49795	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:48 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:49 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155949Z-r1755647c66ldhdjeavapf4fd000000006x0000000000b1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:49 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49796	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:48 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:49 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:49 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155949Z-r1755647c66ldhdjeavapf4fd000000006s000000000au4w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:49 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49798	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:49 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:49 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 389326c4-a01e-0053-299b-278603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155949Z-r1755647c66z67vn9nc21z11a8000000064g000000009n5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:49 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49797	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:49 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:49 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2ee95feb-501e-0029-5d17-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155949Z-17fbfdc98bbbnx4ldgze4de5zs00000005ag000000009pkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:49 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49799	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:49 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:49 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:49 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155949Z-r1755647c66t77qv3m6k1gb3zw00000006ag00000000dha0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:49 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49800	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:49 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 2399187d-801e-008f-5f67-282c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155949Z-r1755647c66bdj57qqnd8h5hp800000007e000000000519s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:50 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49801	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:49 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:49 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155949Z-17fbfdc98bbtwz55a8v24wfkdw00000007wg0000000080g4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:50 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49802	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:49 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:50 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155950Z-17fbfdc98bbp77nqf5g2c5aavs000000069g00000000d0uk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:50 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49803	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:49 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:50 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:50 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2125f972-501e-0035-10a3-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155950Z-r1755647c66tsn7nz9wda692z00000000570000000000w0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:50 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49804	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:50 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:50 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155950Z-17fbfdc98bbnsg5pw6rasm3q8s000000073g00000000b87z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:50 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49806	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:50 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:50 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a93e4d9c-801e-0015-6aa4-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155950Z-r1755647c6688lj6g0wg0rqr14000000072g00000000085r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:50 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49807	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:50 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:50 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: d145a723-401e-0067-13b1-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155950Z-17fbfdc98bb8mkvjfkt54wa53800000004ug00000000073f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:50 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49808	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:50 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:50 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 64bb7fc7-f01e-0071-5d6f-28431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155950Z-17fbfdc98bb5d4fn785en176rg00000006q000000000dt5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49809	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:50 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:50 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: cb602259-c01e-0046-02b2-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155950Z-17fbfdc98bbx59j5xd9kpbrs8400000006ag000000001fmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:51 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49810	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:51 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: ba54a096-301e-0020-3719-266299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155951Z-17fbfdc98bbh7l5skzh3rekksc000000081000000000cdkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49811	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:51 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 39bce04a-301e-0051-2eae-2638bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155951Z-r1755647c668pfkhys7b5xnv2n000000077000000000e409 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49812	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:51 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:51 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155951Z-17fbfdc98bb6vp4m3kc0kte9cs00000007eg00000000cpyc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49813	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:51 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155951Z-17fbfdc98bbzsht4r5d3e0kyc00000000600000000005rpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49814	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:51 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:51 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 57638fd1-a01e-0053-7b67-288603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155951Z-r1755647c66tsn7nz9wda692z0000000050000000000e2m3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49815	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:51 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:51 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 962e216e-b01e-0070-5bcb-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155951Z-17fbfdc98bb6kklk3r0qwaavtw00000004v0000000000m6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49816	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:52 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:52 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155952Z-r1755647c66ljccje5cnds62nc00000005mg000000000gyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:52 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49817	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:52 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:52 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:52 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7a23be84-101e-0079-6389-285913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155952Z-17fbfdc98bbbnx4ldgze4de5zs00000005eg000000001a2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:52 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49819	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:52 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:52 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:52 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 18df47ae-c01e-00a1-2249-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155952Z-17fbfdc98bbt5dtr27n1qp1eqc00000006y0000000008v71 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:52 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49818	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:52 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:52 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:52 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155952Z-17fbfdc98bbds27mnhu6ftg4d8000000051000000000emk0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:52 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49820	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:52 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:53 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ca6c0e2f-901e-008f-5413-2667a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155952Z-17fbfdc98bblfj7gw4f18guu280000000890000000002f76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:53 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49822	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:53 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:53 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155953Z-r1755647c666s72wx0z5rz6s6000000007w0000000002t4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:53 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49821	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:53 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:53 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 4e972348-801e-00ac-276d-28fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155953Z-r1755647c66mmrln9nsykf75u800000005tg00000000bc5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:53 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49824	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:53 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:53 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:53 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2ac474a9-a01e-0098-14a3-268556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155953Z-17fbfdc98bbx59j5xd9kpbrs8400000006bg0000000004y6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:53 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49823	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:53 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ffa56774-c01e-007a-6c38-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155953Z-r1755647c66mmrln9nsykf75u800000005t000000000atxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49825	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:53 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:53 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 04de2316-001e-0082-3987-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155953Z-17fbfdc98bb5d4fn785en176rg00000006t00000000078tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:53 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49827	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:54 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 6c7958f7-701e-001e-113a-29f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155954Z-17fbfdc98bbnvkgdqtwd2nmyz800000005tg000000000gdm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49826	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:54 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:54 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 321a447c-801e-002a-4da3-2631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155954Z-17fbfdc98bbwmxz5amc6q625w000000002u0000000004190 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:54 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49829	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:54 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:54 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:54 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155954Z-17fbfdc98bbh7l5skzh3rekksc0000000830000000009u95 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:54 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49830	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:54 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:54 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 75e7650a-001e-0079-12c4-2612e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155954Z-r1755647c668pfkhys7b5xnv2n000000078g00000000avwv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49828	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:54 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:55 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:54 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 0f0be25c-301e-006e-4493-28f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155954Z-17fbfdc98bbzsht4r5d3e0kyc000000005x000000000cu8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:55 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49831	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:55 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:55 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: b8f0a3b1-001e-0017-5067-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155955Z-17fbfdc98bblzxqcphe71tp4qw0000000270000000001ket x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:55 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49832	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:55 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:55 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155955Z-r1755647c66t77qv3m6k1gb3zw00000006f0000000003hyt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49833	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:55 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 214eaf96-b01e-00ab-509c-27dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155955Z-r1755647c66hbclz9tgqkaxg2w00000008bg0000000045ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49834	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:55 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:55 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155955Z-r1755647c668pfkhys7b5xnv2n000000076g00000000f2y2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:55 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49835	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:55 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:55 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: de1a9787-701e-006f-48ae-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155955Z-r1755647c66ss75qkr31zpy1kc00000006d0000000007wnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49836	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:56 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:56 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:56 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: bed91e61-d01e-0017-7ef4-26b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155956Z-17fbfdc98bbsw6nnfh43fuwvyn00000004sg00000000dnm9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:56 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49837	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:56 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:56 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:56 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: ba33cc4f-e01e-0052-2e6f-28d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155956Z-r1755647c66gqcpzhw8q9nhnq000000007hg000000004w77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:56 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49838	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:56 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:56 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155956Z-r1755647c66vpf8fnbgmzm21hs00000007n000000000eeae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:56 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49839	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:56 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:56 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:56 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 170621ef-f01e-003f-351f-28d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155956Z-17fbfdc98bbds27mnhu6ftg4d8000000051000000000emns x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:56 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49840	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:56 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:56 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:56 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155956Z-r1755647c66kcsqh9hy6eyp6kw00000004xg00000000crce x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:56 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49842	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:57 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:57 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:57 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 1515cbe5-b01e-0084-6467-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155957Z-17fbfdc98bbl4k6fkakdqzw75c00000006f0000000003466 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:59:57 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49841	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:57 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:57 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: baf401f8-c01e-00ad-1d9e-26a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155957Z-r1755647c66pzcrw3ktqe96x2s00000007xg00000000ecy7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:57 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49843	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:57 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:57 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155957Z-r1755647c66vxbtprd2g591tyg00000006a000000000d92r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:57 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49844	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:57 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:57 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:57 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: f60f2227-501e-0064-5d90-271f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155957Z-17fbfdc98bbl4n669ut4r27e0800000006g000000000172p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:57 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49845	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:57 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:57 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:57 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 37a0b860-701e-0001-05e6-27b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155957Z-17fbfdc98bbzsht4r5d3e0kyc000000005z000000000909u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:57 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49846	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:58 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:58 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155958Z-17fbfdc98bb9cv5m0pampz446s00000006900000000018h1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:58 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49847	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:58 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:58 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:58 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: d866d412-001e-0028-1c9c-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155958Z-r1755647c66mmrln9nsykf75u800000005yg0000000002hx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:58 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49848	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:58 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:58 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155958Z-r1755647c66vpf8fnbgmzm21hs00000007mg00000000e8p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:58 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49849	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:58 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:58 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:58 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155958Z-17fbfdc98bbnvkgdqtwd2nmyz800000005mg00000000cbwn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:58 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49850	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:58 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:58 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:58 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155958Z-17fbfdc98bbnvkgdqtwd2nmyz800000005r000000000574v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:58 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49851	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:59 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:59 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:59 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155959Z-r1755647c66mmrln9nsykf75u800000005t000000000atz4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:59 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49852	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:59 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:59 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:59 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155959Z-r1755647c668pfkhys7b5xnv2n00000007a00000000075em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:59 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49853	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:59 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:59 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:59 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4e087ea8-e01e-0099-0e5a-28da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155959Z-r1755647c668pfkhys7b5xnv2n000000079000000000a7vr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:59 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49854	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:59 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:59 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:59 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155959Z-17fbfdc98bbds27mnhu6ftg4d8000000058g0000000001tq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:59 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49855	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:59:59 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:59:59 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:59:59 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 17a5a9a5-201e-0003-7b36-28f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T155959Z-17fbfdc98bb2rxf2hfvcfz540000000004sg000000002rak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:59:59 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49856	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:00 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:00 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160000Z-r1755647c66p58nm9wqx75pnms000000060g00000000398h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:00 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49857	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:00 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:00 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c21b1165-c01e-008e-596f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160000Z-17fbfdc98bb9cv5m0pampz446s000000064g00000000av3c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:00 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49858	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:00 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:00 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:00 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: c4804143-f01e-0003-2fe0-254453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160000Z-r1755647c666s72wx0z5rz6s6000000007vg00000000370r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:00 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49859	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:00 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:00 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:00 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 672cac94-f01e-00aa-27b2-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160000Z-r1755647c66kcsqh9hy6eyp6kw00000004yg00000000c2dm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:00 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49860	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:00 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:00 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:00 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: ead33fc5-401e-0029-0967-289b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160000Z-r1755647c665dwkwce4e7gadz000000007hg000000009un4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 16:00:00 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49861	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:00 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:01 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:00 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 4bfb087f-501e-008f-4c9c-279054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160000Z-r1755647c66z67vn9nc21z11a8000000062000000000dx71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 16:00:01 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49862	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:01 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:01 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:01 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160001Z-17fbfdc98bbtwz55a8v24wfkdw00000007zg000000001rkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 16:00:01 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49863	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:01 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:01 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: fcac5f09-801e-007b-3f67-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160001Z-r1755647c66ss75qkr31zpy1kc00000006d0000000007wvk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:01 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49864	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:01 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:01 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:01 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160001Z-17fbfdc98bbtf4jxpev5grnmyw00000006yg000000004mh4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:01 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49865	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:01 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:01 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160001Z-r1755647c66tsn7nz9wda692z00000000540000000006vxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:01 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49866	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:01 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:02 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:01 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160001Z-17fbfdc98bbp77nqf5g2c5aavs00000006h00000000000hw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:02 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49867	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:01 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:01 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c91d50fe-d01e-0049-5267-28e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160001Z-r1755647c66hlhp26bqv22ant400000006zg0000000035x5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:02 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49868	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:01 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:02 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160002Z-r1755647c66gqcpzhw8q9nhnq000000007fg00000000azft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:02 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49869	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:02 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:02 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 2a07df1e-d01e-0049-69a3-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160002Z-r1755647c668pfkhys7b5xnv2n00000007a00000000075fz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:02 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49870	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:02 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:02 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 44c445c3-601e-003e-0f9c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160002Z-r1755647c66hxv26qums8q8fsw00000004w00000000089gg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:02 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49871	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:02 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:03 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 43b0bec6-701e-0050-4289-286767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160002Z-17fbfdc98bb2rxf2hfvcfz540000000004kg00000000e9dr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 16:00:03 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49872	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:02 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:02 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f459058d-801e-0015-12e0-25f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160002Z-r1755647c66mrgwz6d897uymaw00000000p000000000818r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:03 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49873	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:02 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:02 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 5c4d015b-701e-0097-6b71-28b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160002Z-r1755647c66trqwgqbys9wk81g00000005b00000000066s8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:03 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49874	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:03 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:03 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e871c79c-701e-005c-74c5-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160003Z-r1755647c66kcsqh9hy6eyp6kw0000000510000000005gf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:03 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49875	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:03 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:03 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:03 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160003Z-r1755647c66z4xgb5rng8h32e800000005ug000000000fav x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:03 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49876	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:03 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:03 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 84f987b9-901e-0083-2ea3-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160003Z-17fbfdc98bbds27mnhu6ftg4d8000000051000000000emuf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:03 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49877	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:03 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:03 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160003Z-17fbfdc98bbt5dtr27n1qp1eqc00000006v000000000dawh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:03 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49878	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:03 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:03 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 0ad7b348-901e-0067-0d67-28b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160003Z-17fbfdc98bbl4n669ut4r27e0800000006d0000000007k99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:03 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49879	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:04 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:04 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160004Z-17fbfdc98bbgm62892kdp1w19800000005yg000000000yyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:04 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49880	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:04 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:04 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:04 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 35d0191b-501e-0047-5a17-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160004Z-17fbfdc98bb6vp4m3kc0kte9cs00000007g0000000009k0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 16:00:04 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49881	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:04 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:04 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:04 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8055f236-801e-0083-4e87-28f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160004Z-r1755647c66mmrln9nsykf75u800000005sg00000000cqek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 16:00:04 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49883	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:04 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:04 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:04 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160004Z-r1755647c66mmrln9nsykf75u800000005ug000000008duh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:04 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49882	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:04 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:04 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:04 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 78a5f633-501e-005b-51a6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160004Z-r1755647c66mrgwz6d897uymaw00000000qg000000004s1c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:04 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49884	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:04 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:04 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 84f9cde7-901e-0083-36a3-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160004Z-17fbfdc98bb2cvg4m0cmab3ecw00000005hg000000003c11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:05 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49885	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:05 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:05 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160005Z-r1755647c66hlhp26bqv22ant400000006zg00000000360f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:05 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49886	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:05 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:05 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:05 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160005Z-17fbfdc98bbsq6qfu114w62x8n00000005fg00000000e78x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:05 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49887	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:05 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:05 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:05 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 30963bf2-701e-0001-2a98-28b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160005Z-r1755647c66f4bf880huw27dwc000000084g000000005hyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 16:00:05 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49888	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:05 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:05 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 8e439449-301e-0051-2567-2838bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160005Z-17fbfdc98bbzsht4r5d3e0kyc000000005xg00000000bkdu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:05 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49889	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:05 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:05 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160005Z-17fbfdc98bb6vp4m3kc0kte9cs00000007k0000000005tf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:05 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49890	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:06 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:06 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160006Z-r1755647c668lcmr2va34xxa5s00000005gg000000000k2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:06 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49891	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:06 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:06 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 4fe07ac1-301e-0099-249c-276683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160006Z-r1755647c66ldhdjeavapf4fd000000006u0000000006mqs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:06 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49892	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:06 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:06 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 44b69168-a01e-0098-3739-288556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160006Z-r1755647c66vxbtprd2g591tyg00000006cg000000008mzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:06 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49893	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:06 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:06 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:06 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160006Z-17fbfdc98bbsw6nnfh43fuwvyn00000004v000000000agdp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:06 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49894	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:06 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:06 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: bb02c222-c01e-00ad-7da4-26a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160006Z-r1755647c66gqcpzhw8q9nhnq000000007dg00000000d9xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:06 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49895	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:07 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:07 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:07 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: c79115df-401e-008c-03b0-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160007Z-17fbfdc98bbsq6qfu114w62x8n00000005pg000000000qhv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 16:00:07 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49896	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:07 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:07 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 2a908cec-901e-007b-2c04-27ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160007Z-r1755647c66ss75qkr31zpy1kc00000006f0000000003447 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:07 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49897	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 16:00:07 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 16:00:07 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 16:00:07 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T160007Z-r1755647c66t77qv3m6k1gb3zw000000069g00000000ee8g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 16:00:07 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Target ID:	0
Start time:	11:58:38
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:58:43
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2220,i,4729958559204312130,14849540772647102609,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:58:46
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u47860934.ct.sendgrid.net/asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYMt1nc7izlPWyI_h3l8D5nPglJMb6IU7pxd4NWW3CuMsgAnxRkiNNBrLpChQX4iBmWmSpD1zK3OOBWMm9wyxUVvX05DFTJ-l_VbX17LP50_W9HgB-yL4aC0RaD6JbPJdn0OheLwu0A="
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://u47860934.ct.sendgrid.net/asm/unsubscribe/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMw...	HTTP Parser: No favicon
Source: https://u47860934.ct.sendgrid.net/asm/?user_id=47860934&data=hC3xl-lgkM8YTVgFw1ynd63_65kh6CtqvDm5Gr5N1DVoMDAwdTAwMDJZ6OOSZ8e8QC0lhHSqZbVwjcHQ7JLSZKWfF6VqwaHnIGCsSvoju1ICqZtdQit5MzxTwYJzG2nnZuzkyJcDE16cXyQNJO67vUaAQPYeQFSVW0WOIUxVj4MJnaccS9XuPGMHj5eg2qV5QZY_RXQhwe-NHgEP7ix180s91VBoEdDFenzFlaxNpErbvJgQdx4uHjWu-6mqcbi_8-Cmq9UBHPSFF_Xkji4v8QOfyKILSy2xb0F33iCS1ymaLcGTKKZvZUcfZDDn0hn4dPYfTf2JVZrV_KQxkRyWLc-wROFA0j3TQttNHIuMcG1l2b47Ntecq6SULIsbCoMKotgnWtlpkSuliJ_NgdL5cKsRgAC9Otw9fpRk5mNCB2TTU0mXgGaNm7Nin6Rh3YjS6TLxZ83hvaVWX_Hvb4lt7TEjSQzZ64vOJaVvKHmp3VlXI7MJrFzWDCgnw3xW0PM_xywu-XrwSWuPDz0PUSknVMXv3LcvP7VuEWzPAcjXA1zcljvMb7iSOo9gwQkg_5KkMnf4ic2uxOPjPRogSb-Ad6Ft6yK0FHGCle6IaXcIi-6WD4a5lSvbod7JPvvDG9NRw1TB0IrpSFwRhNB0Re5ev5gIOGQ96BW5WDz4Hg7rrI-Znjf0Jh2v4Hu8IG9iaR3q5DjKN9V4eN00U6Stnmgy956D8wkBqRyYAtd80sagI87tC4Y4Fy-6Rf2kInnoiOB9VkSMr9udOQ4nuK1k7oabgsSWrZS56_7Y59VAY_wNrYvmtQNz-j91c3Fk5EgNkefFvV9QG_Cl1qFy3vysVzVrf9dTIgFlttZj9PMxObT0GqfD6YCocIxDaj9h0onLgj-2ns3uV4myb3KQgh8GibeJjfnPpPxIS_rbhmelMbJxCtRdciFTJbvbKMwr3lct9bV2HYM...	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: u47860934.ct.sendgrid.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 43

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5824, Parent PID: 480

General

Chronological Activities

Analysis Process: chrome.exePID: 5640, Parent PID: 5824