Edit tour

Windows Analysis Report
http://henselsreadymix.com

Overview

General Information

Sample URL:	http://henselsreadymix.com
Analysis ID:	1562134
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 3064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2532,i,4082695311861681308,2717946964609321151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://henselsreadymix.com" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 25 Nov 2024 07:45:48 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33Content-Length: 209Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.11:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.11:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.11:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.11:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.11:49843 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/15@8/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2532,i,4082695311861681308,2717946964609321151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://henselsreadymix.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2532,i,4082695311861681308,2717946964609321151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://henselsreadymix.com	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://henselsreadymix.com/icons/blank.gif	0%	Avira URL Cloud	safe
https://henselsreadymix.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
henselsreadymix.com	5.230.35.39	true	false		unknown
www.google.com	142.250.181.68	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://henselsreadymix.com/icons/blank.gif	false	Avira URL Cloud: safe	unknown
https://henselsreadymix.com/?C=M;O=A	false		unknown
https://henselsreadymix.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://henselsreadymix.com/	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
5.230.35.39	henselsreadymix.com	Germany	12586	ASGHOSTNETDE	false

Private

IP
192.168.2.11

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562134
Start date and time:	2024-11-25 08:44:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://henselsreadymix.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/15@8/4

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 142.250.181.142, 74.125.205.84, 34.104.35.123, 217.20.56.100, 172.217.17.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, otelrules.azureedge.net, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://henselsreadymix.com

Simulations

Behavior and APIs

⊘No simulations

Input	Output
URL: http://henselsreadymix.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://henselsreadymix.com
URL: https://henselsreadymix.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://henselsreadymix.com/ Model: Joe Sandbox AI	{ "brands": [] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 06:45:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9888975485404274
Encrypted:	false
SSDEEP:	48:80idq0TULEoCHeidAKZdA1nehwiZUklqehr1ny+3:80UoBS5y
MD5:	76458A790E6F2B1C3C6F721350AABBDD
SHA1:	E52745E7B7F93DBA513A7C20210A98A24BFFB6A5
SHA-256:	14310B6DDC9555A26AF6D3FE120FFA4B8257481B6F1D5040F813EF74882F3AEA
SHA-512:	A544C06D1D3E04B25E7B7789197BE6012F41026D43D8A407003CD04C527ACEAEC1A2EFB1161829E5D57EC08788AE2E3CAB08A69F331837DB219E22A2A4796E45
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....0....?......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY.=....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY.=..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VyY.=............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 06:45:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.00430139192108
Encrypted:	false
SSDEEP:	48:8Nidq0TULEoCHeidAKZdA1geh/iZUkAQkqehC1ny+2:8NUot9Ql5y
MD5:	113FE911F28FA0DD826EEF28C582BC86
SHA1:	55721814CADFF5FA9E3B95C97AE515EC67358C64
SHA-256:	25928D1C13CBE509BB8200E8F05D8EC932AE49977656C8F8C52552988744EAEF
SHA-512:	EF2658B857557B6E734707DA56DF574CED006C9EF5C2070008C49583498ED31086058DB33E112F79DE61C4980332B14BD66717276DEB9995581C4BE76F942CC0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........?......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY.=....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY.=..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VyY.=............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 09:52:18 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	4.010187419221741
Encrypted:	false
SSDEEP:	48:87idq0TULEoCHeidAKZdA148eh7sFiZUkmgqeh7sc1ny+BX:87UoDnW5y
MD5:	639D188E63E70C29912894B7662C31E3
SHA1:	F272F1B3F540FDE0D6EF020314E9EAB7DE31F470
SHA-256:	69A276FEF6399659862B859D9B83A0A25583FB9D8BB3346BBAF2187882CF0131
SHA-512:	AEB1B46B79FCD03135E1B3E98765095F48294487CC4089EA1B399F01CABA784CD1348499F02AA9E492CCAA0510EB016621BD31113FD7585EFCB41DA23CB63A28
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s4..z.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY.=....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY.=..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.V............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 06:45:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.999817357914674
Encrypted:	false
SSDEEP:	48:8Kidq0TULEoCHeidAKZdA1lehDiZUkwqeh+1ny+R:8KUogE5y
MD5:	86FC38E4F5C96FAEEA5D2A4D74EE4C82
SHA1:	1B466A1C65305385923DA30FB52C0E039334627E
SHA-256:	90282D970E5923DB009F7435C6E4011455B29A6173F93467AEB726AAA2A450D2
SHA-512:	18BAB08B3AC55F53ACBE0AF7226D74523CDA8E6FEE51BA06ECE4DC38DAB07C31B360784B6B7DBFB1447EDF0A85781BCD39396036C9BF3E5CEB6BE6EB348E8D4F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........?......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY.=....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY.=..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VyY.=............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 06:45:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9904937489905774
Encrypted:	false
SSDEEP:	48:8Xidq0TULEoCHeidAKZdA17ehBiZUk1W1qehw1ny+C:8XUoQ9Q5y
MD5:	B6457826D69D70E2B2DC0D7201D5F484
SHA1:	FE32112395D7CBDCA17C1C041A047E74B5349D99
SHA-256:	8208B905C6E5BC4F327E3E21913DD3A5FC0899EFC4B7CB5FE8445029A6DD1ECD
SHA-512:	3E4EFDB16268D00F036523176D1A591FA99CF371D4D029C4374D596E990C274832764DD156CE32ACD641BF8FE55A304DEB5E545C69DD8EAF5B08A81B2B0C9F87
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........?......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY.=....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY.=..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VyY.=............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 06:45:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9995863903238003
Encrypted:	false
SSDEEP:	48:8Iidq0TULEoCHeidAKZdA1duTiehOuTbbiZUk5OjqehOuTbW1ny+yT+:8IUoQTLTbxWOvTbW5y7T
MD5:	F830572A730E2E83AD30E49EA139720B
SHA1:	BB345AE53FE72024AEE568B6FAD468C56A2AA6D9
SHA-256:	B93F29A9709407AF8633D5B9866089AD4D5040AADE869B4148A858D7067B6F08
SHA-512:	4144D0F329D22EDA405054BC7A317EED8D3EB4D65ACC99AD4046689908167274792CFED055755B66E5CE9485F76EEB1FB280073B4930BCB4B9957D4CACA1BAB5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....a...?......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY.=....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY.=..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VyY.=............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 20 x 22
Category:	dropped
Size (bytes):	148
Entropy (8bit):	5.356073575747541
Encrypted:	false
SSDEEP:	3:CNl4aa/tErhuDOSikMNmXQOlFvTM5l/ZICwRADutayEJfllnJIV1xEn:S0EFuDmkMJO3CxZICk9tfEJO1xEn
MD5:	19517FB39A31BE6B8D7CCF53AD84908F
SHA1:	EBBCFDC6ACC99F7AAC3BF7FE72BC55F07F03F7E9
SHA-256:	3CB0E54BABF019703FE671A32FCC3947AAB9079EC2871CF0F9639245CC12D878
SHA-512:	BE752FF4C7AA3AB46FDBD93555A17E422E7C8B8661F40F899F51EC9393B510DCB2E66436A4F2C78A42AF77DD95E01A3438C88CFAA3E0B02694C1912D5294EE16
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.NThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995.!.......,..........................I..;

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	481
Entropy (8bit):	4.976621539492647
Encrypted:	false
SSDEEP:	12:BMQkuxRsTdO0sszLxXGMJLZvLeLft9WRHeGHeAg:Wlux+49snxXGMFZDoft9el5g
MD5:	A8AC0122683C97C36CDC938489116ADB
SHA1:	FE348D029A6E4C63122A89076787B63B6ECFBEF3
SHA-256:	9AD8C853B27F4DF4AE8C019ADD146F81347C15D44C32EA7746F9C4EE7F3E9BB1
SHA-512:	D411504810542D4AC5C0CF473BA5E2D99C8FE5D50E733DBF971A55ED2CD07ECE86B6FD8206800FE6DC19975E98C98BC221C12F4E0D9CAE9A947A73CDAC0B0C71
Malicious:	false
Reputation:	low
URL:	https://henselsreadymix.com/?C=M;O=A
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<html>. <head>. <title>Index of /</title>. </head>. <body>.<h1>Index of /</h1>. <table>. <tr><th valign="top"><img src="/icons/blank.gif" alt="[ICO]"></th><th><a href="?C=N;O=A">Name</a></th><th><a href="?C=M;O=D">Last modified</a></th><th><a href="?C=S;O=A">Size</a></th><th><a href="?C=D;O=A">Description</a></th></tr>. <tr><th colspan="5"><hr></th></tr>. <tr><th colspan="5"><hr></th></tr>.</table>.</body></html>.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 20 x 22
Category:	downloaded
Size (bytes):	148
Entropy (8bit):	5.356073575747541
Encrypted:	false
SSDEEP:	3:CNl4aa/tErhuDOSikMNmXQOlFvTM5l/ZICwRADutayEJfllnJIV1xEn:S0EFuDmkMJO3CxZICk9tfEJO1xEn
MD5:	19517FB39A31BE6B8D7CCF53AD84908F
SHA1:	EBBCFDC6ACC99F7AAC3BF7FE72BC55F07F03F7E9
SHA-256:	3CB0E54BABF019703FE671A32FCC3947AAB9079EC2871CF0F9639245CC12D878
SHA-512:	BE752FF4C7AA3AB46FDBD93555A17E422E7C8B8661F40F899F51EC9393B510DCB2E66436A4F2C78A42AF77DD95E01A3438C88CFAA3E0B02694C1912D5294EE16
Malicious:	false
Reputation:	low
URL:	https://henselsreadymix.com/icons/blank.gif
Preview:	GIF89a...................!.NThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995.!.......,..........................I..;

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	5.143049113812332
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3ezJLM4KCezocKqD:J0+oxBeRmR9etdzRxy17ez1T
MD5:	18FFB59B61525F781CF9251045BE575D
SHA1:	BD7318B00B15B7A1C8A48524419FA2E5C27A5B6D
SHA-256:	B6682CAB65D3243B5B75EFB7279DBF49491957484780F2BA0A87632CC0E25642
SHA-512:	A032F853ABD9492232E1183D1CB1D14110B623F2E9DEC56B7B64DD576A0317DDA8D51125763E11D6642433C5364B2BD10A994EE4F1514629A4950BBAB3ABA499
Malicious:	false
Reputation:	low
URL:	https://henselsreadymix.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL /favicon.ico was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	481
Entropy (8bit):	4.976621539492647
Encrypted:	false
SSDEEP:	12:BMQkuxRsTdO0sszLxXGMMLZQlLeLft9WRHeGHeAg:Wlux+49snxXGMWZyoft9el5g
MD5:	E6FDD231AF277F0E2D2DCA34438F483E
SHA1:	8B3E1167F44D85689203BBD1C83C3138594B3BD3
SHA-256:	B0893B6C9225A4291FFC5CD7164A96304AED135DFD40763B4FEDC970BF0ABE3D
SHA-512:	9E281F9C6FB15D3E218606682278458AC3F5C6ED801DCBC1DA5EB0F055986F03B6C6F6FDF4FE9C456C95445700119E3D79D61E725F762250AC9260268C03B9B0
Malicious:	false
Reputation:	low
URL:	https://henselsreadymix.com/
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<html>. <head>. <title>Index of /</title>. </head>. <body>.<h1>Index of /</h1>. <table>. <tr><th valign="top"><img src="/icons/blank.gif" alt="[ICO]"></th><th><a href="?C=N;O=D">Name</a></th><th><a href="?C=M;O=A">Last modified</a></th><th><a href="?C=S;O=A">Size</a></th><th><a href="?C=D;O=A">Description</a></th></tr>. <tr><th colspan="5"><hr></th></tr>. <tr><th colspan="5"><hr></th></tr>.</table>.</body></html>.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 08:45:33.738584995 CET	49676	443	192.168.2.11	20.189.173.3
Nov 25, 2024 08:45:33.784897089 CET	49674	443	192.168.2.11	173.222.162.42
Nov 25, 2024 08:45:33.878660917 CET	49673	443	192.168.2.11	173.222.162.42
Nov 25, 2024 08:45:34.050525904 CET	49676	443	192.168.2.11	20.189.173.3
Nov 25, 2024 08:45:34.659862995 CET	49676	443	192.168.2.11	20.189.173.3
Nov 25, 2024 08:45:34.691123962 CET	49671	443	192.168.2.11	204.79.197.203
Nov 25, 2024 08:45:35.863034964 CET	49676	443	192.168.2.11	20.189.173.3
Nov 25, 2024 08:45:38.394231081 CET	49676	443	192.168.2.11	20.189.173.3
Nov 25, 2024 08:45:40.194236994 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:40.194263935 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:40.194411039 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:40.195028067 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:40.195040941 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:41.980498075 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:41.980617046 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:41.985364914 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:41.985375881 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:41.985665083 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:41.997468948 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.011421919 CET	49711	80	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:42.011589050 CET	49712	80	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:42.011990070 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:42.012026072 CET	443	49713	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:42.012132883 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:42.012306929 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:42.012321949 CET	443	49713	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:42.043323994 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.130938053 CET	80	49711	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:42.131022930 CET	80	49712	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:42.131057024 CET	49711	80	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:42.131093025 CET	49712	80	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:42.472618103 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.472647905 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.472664118 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.472759008 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.472775936 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.472831011 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.656219006 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.656249046 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.656308889 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.656320095 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.656358004 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.735007048 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.735039949 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.735121965 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.735121965 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.735132933 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.735305071 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.837220907 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.837251902 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.837311029 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.837321043 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.837336063 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.837374926 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.872126102 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.872179031 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.872248888 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.872265100 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.872282982 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.872383118 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.890388012 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.890436888 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.890486002 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.890507936 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.890542030 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.890655994 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.911477089 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.911525011 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.911586046 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:42.911602974 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:42.911644936 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.030410051 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.030431986 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.030520916 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.030531883 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.030591011 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.046220064 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.046242952 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.046324015 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.046334982 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.046375990 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.059371948 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.059397936 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.059474945 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.059484959 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.059535027 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.059556007 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.074489117 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.074506998 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.074577093 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.074584961 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.074752092 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.089685917 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.089709044 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.089775085 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.089785099 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.089821100 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.103775978 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.103811979 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.103919029 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.103919029 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.103930950 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.104171038 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.108164072 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.108248949 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.108304977 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.108304977 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.113676071 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.113676071 CET	49708	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.113698006 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.113706112 CET	443	49708	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.199016094 CET	49676	443	192.168.2.11	20.189.173.3
Nov 25, 2024 08:45:43.217308998 CET	49717	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.217338085 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.217511892 CET	49717	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.217551947 CET	49716	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.217592001 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.217650890 CET	49716	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.218909979 CET	49718	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.218918085 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.219008923 CET	49718	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.219364882 CET	49717	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.219376087 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.219615936 CET	49716	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.219630957 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.220359087 CET	49719	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.220371962 CET	443	49719	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.220511913 CET	49718	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.220523119 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.220540047 CET	49719	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.220659018 CET	49719	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.220673084 CET	443	49719	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.221275091 CET	49720	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.221307039 CET	443	49720	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.221390963 CET	49720	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.221654892 CET	49720	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:43.221671104 CET	443	49720	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:43.389241934 CET	49674	443	192.168.2.11	173.222.162.42
Nov 25, 2024 08:45:43.484364033 CET	49673	443	192.168.2.11	173.222.162.42
Nov 25, 2024 08:45:43.868165016 CET	443	49713	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:43.868469000 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:43.868480921 CET	443	49713	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:43.869617939 CET	443	49713	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:43.869677067 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:43.875437021 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:43.875555992 CET	443	49713	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:43.875639915 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:43.921444893 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:43.921458006 CET	443	49713	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:43.968918085 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:44.295253038 CET	443	49713	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:44.295433044 CET	443	49713	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:44.295502901 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:44.297646999 CET	49671	443	192.168.2.11	204.79.197.203
Nov 25, 2024 08:45:44.325483084 CET	49721	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:45:44.325532913 CET	443	49721	142.250.181.68	192.168.2.11
Nov 25, 2024 08:45:44.325684071 CET	49721	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:45:44.326011896 CET	49721	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:45:44.326026917 CET	443	49721	142.250.181.68	192.168.2.11
Nov 25, 2024 08:45:44.335798979 CET	49713	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:44.335815907 CET	443	49713	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:44.348464966 CET	49722	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:44.348514080 CET	443	49722	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:44.348714113 CET	49722	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:44.349037886 CET	49722	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:44.349054098 CET	443	49722	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:44.861042976 CET	49723	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:44.861095905 CET	443	49723	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:44.861344099 CET	49723	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:44.863965988 CET	49723	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:44.863981009 CET	443	49723	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:44.933618069 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:44.934412003 CET	443	49719	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:44.935359955 CET	49716	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:44.935379982 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:44.935956001 CET	49716	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:44.935961008 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:44.936618090 CET	49719	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:44.936635017 CET	443	49719	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:44.937166929 CET	49719	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:44.937171936 CET	443	49719	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.000940084 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.001463890 CET	49718	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.001488924 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.001966953 CET	49718	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.001976013 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.064492941 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.065036058 CET	49717	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.065049887 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.065603018 CET	49717	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.065608025 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.066405058 CET	443	49720	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.066891909 CET	49720	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.066914082 CET	443	49720	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.067311049 CET	49720	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.067321062 CET	443	49720	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.370388985 CET	443	49719	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.370553017 CET	443	49719	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.370735884 CET	49719	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.371124983 CET	49719	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.371151924 CET	443	49719	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.371171951 CET	49719	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.371181011 CET	443	49719	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.372334003 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.372361898 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.372567892 CET	49716	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.372584105 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.372665882 CET	49716	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.372751951 CET	49716	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.372757912 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.372782946 CET	49716	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.372905016 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.372931957 CET	443	49716	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.373162031 CET	49716	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.375212908 CET	49725	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.375232935 CET	49724	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.375247955 CET	443	49725	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.375283957 CET	443	49724	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.375310898 CET	49725	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.375338078 CET	49724	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.375487089 CET	49724	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.375488997 CET	49725	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.375502110 CET	443	49724	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.375504017 CET	443	49725	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.449009895 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.449026108 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.449103117 CET	49718	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.449126005 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.449327946 CET	49718	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.449327946 CET	49718	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.449348927 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.449512005 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.449541092 CET	443	49718	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.449593067 CET	49718	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.451874018 CET	49726	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.451937914 CET	443	49726	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.452089071 CET	49726	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.452275038 CET	49726	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.452291965 CET	443	49726	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.521770954 CET	443	49720	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.521945953 CET	443	49720	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.522006989 CET	49720	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.522053957 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.522073030 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.522135973 CET	49717	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.522149086 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.522186041 CET	49720	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.522186041 CET	49720	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.522209883 CET	443	49720	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.522211075 CET	49717	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.522221088 CET	443	49720	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.522361994 CET	49717	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.522361994 CET	49717	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.522372007 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.522559881 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.522593975 CET	443	49717	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.522687912 CET	49717	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.525103092 CET	49727	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.525134087 CET	443	49727	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.525206089 CET	49728	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.525213003 CET	443	49728	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.525235891 CET	49727	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.525264978 CET	49728	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.525438070 CET	49727	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.525450945 CET	443	49727	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.525487900 CET	49728	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:45.525499105 CET	443	49728	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:45.775974035 CET	443	49722	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:45.776668072 CET	49722	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:45.776691914 CET	443	49722	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:45.777074099 CET	443	49722	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:45.780447960 CET	49722	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:45.780543089 CET	443	49722	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:45.780781031 CET	49722	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:45.827342987 CET	443	49722	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:45.886802912 CET	443	49704	173.222.162.42	192.168.2.11
Nov 25, 2024 08:45:45.887787104 CET	49704	443	192.168.2.11	173.222.162.42
Nov 25, 2024 08:45:46.063736916 CET	443	49721	142.250.181.68	192.168.2.11
Nov 25, 2024 08:45:46.072864056 CET	49721	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:45:46.072890043 CET	443	49721	142.250.181.68	192.168.2.11
Nov 25, 2024 08:45:46.074080944 CET	443	49721	142.250.181.68	192.168.2.11
Nov 25, 2024 08:45:46.074264050 CET	49721	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:45:46.081621885 CET	49721	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:45:46.081711054 CET	443	49721	142.250.181.68	192.168.2.11
Nov 25, 2024 08:45:46.121913910 CET	49721	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:45:46.121933937 CET	443	49721	142.250.181.68	192.168.2.11
Nov 25, 2024 08:45:46.169096947 CET	49721	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:45:46.289751053 CET	443	49723	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:46.289877892 CET	49723	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:46.299848080 CET	49723	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:46.299863100 CET	443	49723	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:46.300143957 CET	443	49723	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:46.354279041 CET	49723	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:46.391216040 CET	49723	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:46.431370974 CET	443	49723	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:46.444360018 CET	443	49722	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:46.454130888 CET	443	49722	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:46.454201937 CET	49722	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:46.454566002 CET	49722	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:46.454587936 CET	443	49722	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:46.462465048 CET	49729	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:46.462522984 CET	443	49729	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:46.462620974 CET	49729	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:46.462893963 CET	49729	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:46.462912083 CET	443	49729	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:46.684341908 CET	49730	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:46.684379101 CET	443	49730	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:46.684446096 CET	49730	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:46.684804916 CET	49730	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:46.684823036 CET	443	49730	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:46.980685949 CET	443	49723	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:46.980771065 CET	443	49723	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:46.980895042 CET	49723	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:46.981163025 CET	49723	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:46.981179953 CET	443	49723	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:46.981205940 CET	49723	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:46.981213093 CET	443	49723	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:47.018763065 CET	49731	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:47.018796921 CET	443	49731	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:47.019049883 CET	49731	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:47.019597054 CET	49731	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:47.019608974 CET	443	49731	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:47.192898035 CET	443	49724	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.193739891 CET	49724	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.193767071 CET	443	49724	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.194369078 CET	49724	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.194376945 CET	443	49724	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.211816072 CET	443	49725	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.212466002 CET	49725	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.212493896 CET	443	49725	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.212941885 CET	49725	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.212948084 CET	443	49725	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.230310917 CET	443	49726	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.230992079 CET	49726	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.231017113 CET	443	49726	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.231401920 CET	49726	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.231408119 CET	443	49726	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.302485943 CET	443	49728	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.303438902 CET	49728	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.303462029 CET	443	49728	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.303941965 CET	49728	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.303950071 CET	443	49728	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.368438005 CET	443	49727	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.368971109 CET	49727	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.368999958 CET	443	49727	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.369394064 CET	49727	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.369398117 CET	443	49727	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.627759933 CET	443	49724	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.627837896 CET	443	49724	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.628133059 CET	49724	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.630920887 CET	49724	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.630940914 CET	443	49724	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.635397911 CET	49732	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.635436058 CET	443	49732	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.635519028 CET	49732	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.635831118 CET	49732	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.635843992 CET	443	49732	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.655827999 CET	443	49725	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.655894995 CET	443	49725	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.656059980 CET	49725	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.656106949 CET	49725	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.656124115 CET	443	49725	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.656133890 CET	49725	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.656140089 CET	443	49725	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.658690929 CET	49733	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.658735991 CET	443	49733	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.658886909 CET	49733	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.659001112 CET	49733	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.659020901 CET	443	49733	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.676297903 CET	443	49726	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.676384926 CET	443	49726	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.676537991 CET	49726	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.676615953 CET	49726	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.676630974 CET	443	49726	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.676642895 CET	49726	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.676649094 CET	443	49726	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.679162979 CET	49734	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.679182053 CET	443	49734	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.679265976 CET	49734	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.679385900 CET	49734	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.679397106 CET	443	49734	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.745908022 CET	443	49728	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.745973110 CET	443	49728	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.746058941 CET	49728	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.746798038 CET	49728	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.746798038 CET	49728	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.746815920 CET	443	49728	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.746828079 CET	443	49728	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.750193119 CET	49735	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.750243902 CET	443	49735	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.750507116 CET	49735	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.750642061 CET	49735	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.750663042 CET	443	49735	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.821013927 CET	443	49727	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.821079016 CET	443	49727	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.821217060 CET	49727	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.821464062 CET	49727	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.821480036 CET	443	49727	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.826069117 CET	49736	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.826108932 CET	443	49736	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.826258898 CET	49736	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.826513052 CET	49736	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:47.826524019 CET	443	49736	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:47.944688082 CET	443	49729	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:47.945146084 CET	49729	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:47.945172071 CET	443	49729	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:47.945513964 CET	443	49729	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:47.946012020 CET	49729	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:47.946068048 CET	443	49729	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:47.946084976 CET	49729	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:47.987332106 CET	443	49729	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.011136055 CET	49729	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.157510042 CET	443	49730	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.157792091 CET	49730	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.157813072 CET	443	49730	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.158920050 CET	443	49730	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.158970118 CET	49730	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.159432888 CET	49730	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.159501076 CET	443	49730	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.159766912 CET	49730	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.159779072 CET	443	49730	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.214756012 CET	49730	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.445267916 CET	443	49731	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:48.445403099 CET	49731	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:48.474260092 CET	443	49729	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.474584103 CET	443	49729	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.474728107 CET	49729	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.589540958 CET	49737	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.589600086 CET	443	49737	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.589679956 CET	49737	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.590243101 CET	49737	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.590259075 CET	443	49737	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.596340895 CET	49729	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.596369028 CET	443	49729	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.597404003 CET	49731	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:48.597429037 CET	443	49731	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:48.597820044 CET	443	49731	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:48.599036932 CET	49731	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:48.643332005 CET	443	49731	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:48.705197096 CET	443	49730	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.705324888 CET	443	49730	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:48.705394983 CET	49730	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.706039906 CET	49730	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:48.706058979 CET	443	49730	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:49.008836985 CET	443	49731	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:49.008922100 CET	443	49731	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:49.008996010 CET	49731	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:49.009938955 CET	49731	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:49.009938955 CET	49731	443	192.168.2.11	23.218.208.109
Nov 25, 2024 08:45:49.009960890 CET	443	49731	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:49.009970903 CET	443	49731	23.218.208.109	192.168.2.11
Nov 25, 2024 08:45:49.351592064 CET	443	49732	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.352447033 CET	49732	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.352467060 CET	443	49732	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.353313923 CET	49732	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.353318930 CET	443	49732	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.465178967 CET	443	49735	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.465495110 CET	443	49734	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.466219902 CET	49735	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.466234922 CET	443	49735	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.466759920 CET	49735	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.466764927 CET	443	49735	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.466861010 CET	49734	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.466878891 CET	443	49734	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.467593908 CET	49734	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.467598915 CET	443	49734	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.502672911 CET	443	49733	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.503330946 CET	49733	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.503338099 CET	443	49733	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.503961086 CET	49733	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.503978968 CET	443	49733	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.606323004 CET	443	49736	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.606937885 CET	49736	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.606955051 CET	443	49736	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.607744932 CET	49736	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.607749939 CET	443	49736	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.791264057 CET	443	49732	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.791353941 CET	443	49732	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.791507959 CET	49732	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.791691065 CET	49732	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.791709900 CET	443	49732	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.791723013 CET	49732	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.791728973 CET	443	49732	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.796247959 CET	49738	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.796299934 CET	443	49738	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.796380043 CET	49738	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.796595097 CET	49738	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.796612978 CET	443	49738	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.900819063 CET	443	49735	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.900898933 CET	443	49735	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.901002884 CET	49735	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.901192904 CET	49735	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.901192904 CET	49735	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.901212931 CET	443	49735	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.901221037 CET	443	49735	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.905378103 CET	49739	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.905412912 CET	443	49739	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.905477047 CET	49739	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.905662060 CET	49739	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.905678988 CET	443	49739	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.943346977 CET	443	49734	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.943418026 CET	443	49734	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.943479061 CET	49734	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.943743944 CET	49734	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.943762064 CET	443	49734	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.943783045 CET	49734	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.943789005 CET	443	49734	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.946572065 CET	49740	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.946613073 CET	443	49740	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.946686029 CET	49740	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.946887016 CET	49740	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.946904898 CET	443	49740	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.956703901 CET	443	49733	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.956782103 CET	443	49733	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.956917048 CET	49733	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.957025051 CET	49733	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.957045078 CET	443	49733	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.957057953 CET	49733	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.957063913 CET	443	49733	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.959795952 CET	49741	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.959831953 CET	443	49741	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:49.959901094 CET	49741	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.960036039 CET	49741	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:49.960047007 CET	443	49741	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:50.017535925 CET	443	49737	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:50.017851114 CET	49737	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:50.017885923 CET	443	49737	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:50.018241882 CET	443	49737	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:50.018596888 CET	49737	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:50.018668890 CET	443	49737	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:50.018929005 CET	49737	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:50.049922943 CET	443	49736	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:50.050127983 CET	443	49736	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:50.050240040 CET	49736	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:50.050390959 CET	49736	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:50.050406933 CET	443	49736	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:50.054771900 CET	49742	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:50.054816008 CET	443	49742	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:50.054950953 CET	49742	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:50.055326939 CET	49742	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:50.055346966 CET	443	49742	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:50.059349060 CET	443	49737	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:50.556333065 CET	443	49737	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:50.556525946 CET	443	49737	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:50.558146954 CET	49737	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:50.558360100 CET	49737	443	192.168.2.11	5.230.35.39
Nov 25, 2024 08:45:50.558386087 CET	443	49737	5.230.35.39	192.168.2.11
Nov 25, 2024 08:45:51.575294018 CET	443	49738	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.576194048 CET	49738	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:51.576234102 CET	443	49738	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.576874971 CET	49738	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:51.576884031 CET	443	49738	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.623302937 CET	443	49739	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.623821020 CET	49739	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:51.623852015 CET	443	49739	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.624443054 CET	49739	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:51.624450922 CET	443	49739	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.805466890 CET	443	49740	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.806045055 CET	49740	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:51.806066990 CET	443	49740	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.806515932 CET	49740	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:51.806520939 CET	443	49740	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.807130098 CET	443	49741	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.807431936 CET	49741	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:51.807470083 CET	443	49741	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.807828903 CET	49741	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:51.807837963 CET	443	49741	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.900952101 CET	443	49742	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.901760101 CET	49742	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:51.901788950 CET	443	49742	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:51.902132988 CET	49742	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:51.902137041 CET	443	49742	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.019011021 CET	443	49738	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.019088984 CET	443	49738	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.019174099 CET	49738	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.019341946 CET	49738	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.019359112 CET	443	49738	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.019371033 CET	49738	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.019386053 CET	443	49738	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.022012949 CET	49743	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.022063971 CET	443	49743	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.022134066 CET	49743	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.022310019 CET	49743	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.022345066 CET	443	49743	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.057454109 CET	443	49739	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.057532072 CET	443	49739	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.057596922 CET	49739	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.057969093 CET	49739	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.057986021 CET	443	49739	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.058017015 CET	49739	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.058023930 CET	443	49739	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.060780048 CET	49744	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.060808897 CET	443	49744	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.060868025 CET	49744	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.061031103 CET	49744	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.061039925 CET	443	49744	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.147957087 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:52.147993088 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:52.148071051 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:52.149240017 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:52.149251938 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:52.263010025 CET	443	49741	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.263082027 CET	443	49741	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.263180017 CET	49741	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.263653994 CET	49741	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.263673067 CET	443	49741	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.263686895 CET	49741	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.263693094 CET	443	49741	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.267188072 CET	49746	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.267230988 CET	443	49746	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.267393112 CET	49746	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.267723083 CET	49746	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.267743111 CET	443	49746	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.284221888 CET	443	49740	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.284305096 CET	443	49740	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.284390926 CET	49740	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.284627914 CET	49740	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.284636974 CET	443	49740	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.284651995 CET	49740	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.284657955 CET	443	49740	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.287729979 CET	49747	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.287765026 CET	443	49747	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.287875891 CET	49747	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.288162947 CET	49747	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.288177967 CET	443	49747	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.356738091 CET	443	49742	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.356836081 CET	443	49742	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.356918097 CET	49742	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.357171059 CET	49742	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.357192039 CET	443	49742	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.357208014 CET	49742	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.357213974 CET	443	49742	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.360249043 CET	49748	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.360295057 CET	443	49748	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.360361099 CET	49748	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.360517025 CET	49748	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:52.360528946 CET	443	49748	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:52.810420036 CET	49676	443	192.168.2.11	20.189.173.3
Nov 25, 2024 08:45:53.801290035 CET	443	49743	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:53.801804066 CET	49743	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:53.801831007 CET	443	49743	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:53.802448988 CET	49743	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:53.802454948 CET	443	49743	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:53.804018974 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:53.804095030 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:53.806020975 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:53.806030989 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:53.806334972 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:53.853224993 CET	443	49744	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:53.853888988 CET	49744	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:53.853910923 CET	443	49744	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:53.854449987 CET	49744	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:53.854454994 CET	443	49744	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:53.857304096 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:54.072073936 CET	443	49747	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.072607040 CET	49747	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.072634935 CET	443	49747	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.073256016 CET	49747	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.073261976 CET	443	49747	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.115051031 CET	443	49746	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.115744114 CET	49746	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.115772009 CET	443	49746	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.116075039 CET	49746	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.116086006 CET	443	49746	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.141871929 CET	443	49748	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.142389059 CET	49748	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.142406940 CET	443	49748	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.142823935 CET	49748	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.142829895 CET	443	49748	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.354015112 CET	443	49743	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.354099035 CET	443	49743	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.354176044 CET	49743	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.354409933 CET	49743	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.354415894 CET	443	49744	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.354424000 CET	443	49743	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.354434013 CET	49743	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.354440928 CET	443	49743	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.354475975 CET	443	49744	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.354511976 CET	49744	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.354675055 CET	49744	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.354691982 CET	443	49744	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.354707003 CET	49744	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.354712963 CET	443	49744	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.357626915 CET	49750	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.357650995 CET	443	49750	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.357703924 CET	49751	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.357736111 CET	443	49751	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.357747078 CET	49750	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.357803106 CET	49751	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.357889891 CET	49750	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.357908010 CET	443	49750	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.357983112 CET	49751	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.357995987 CET	443	49751	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.679332972 CET	443	49747	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.679429054 CET	443	49747	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.679553986 CET	49747	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.679836988 CET	49747	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.679836988 CET	49747	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.679860115 CET	443	49747	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.679873943 CET	443	49747	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.680252075 CET	443	49748	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.680334091 CET	443	49748	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.680385113 CET	49748	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.681216955 CET	49748	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.681236029 CET	443	49748	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.683775902 CET	49753	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.683811903 CET	443	49753	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.683904886 CET	49753	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.684638023 CET	49753	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.684648037 CET	443	49753	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.685481071 CET	49754	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.685547113 CET	443	49754	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.685600042 CET	49754	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.685786963 CET	49754	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.685812950 CET	443	49754	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.689549923 CET	443	49746	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.689615011 CET	443	49746	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.689666033 CET	49746	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.689980984 CET	49746	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.690001011 CET	443	49746	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.690013885 CET	49746	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.690020084 CET	443	49746	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.692055941 CET	49755	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.692068100 CET	443	49755	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:54.692142010 CET	49755	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.692379951 CET	49755	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:54.692389011 CET	443	49755	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:55.455966949 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:55.503329039 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:55.750813961 CET	443	49721	142.250.181.68	192.168.2.11
Nov 25, 2024 08:45:55.750899076 CET	443	49721	142.250.181.68	192.168.2.11
Nov 25, 2024 08:45:55.750974894 CET	49721	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:45:56.004683018 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:56.004705906 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:56.004714012 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:56.004724979 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:56.004749060 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:56.004776955 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:56.004792929 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:56.004813910 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:56.004842997 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:56.023174047 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:56.023257017 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:56.023257017 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:56.023298979 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:56.090939045 CET	49721	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:45:56.090970993 CET	443	49721	142.250.181.68	192.168.2.11
Nov 25, 2024 08:45:56.154870987 CET	443	49750	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.155452013 CET	49750	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.155488968 CET	443	49750	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.155994892 CET	49750	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.156003952 CET	443	49750	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.156193018 CET	443	49751	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.156537056 CET	49751	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.156574965 CET	443	49751	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.156919956 CET	49751	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.156930923 CET	443	49751	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.217024088 CET	443	49755	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.217540026 CET	49755	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.217555046 CET	443	49755	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.218034029 CET	49755	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.218038082 CET	443	49755	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.463738918 CET	443	49754	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.465747118 CET	49754	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.465783119 CET	443	49754	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.466290951 CET	49754	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.466301918 CET	443	49754	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.527676105 CET	443	49753	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.528829098 CET	49753	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.528856993 CET	443	49753	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.529344082 CET	49753	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.529352903 CET	443	49753	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.598336935 CET	443	49750	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.598521948 CET	443	49750	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.598597050 CET	49750	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.598634958 CET	49750	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.598654032 CET	443	49750	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.598922968 CET	443	49751	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.598985910 CET	443	49751	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.599075079 CET	49751	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.599231958 CET	49751	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.599231958 CET	49751	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.599247932 CET	443	49751	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.599261045 CET	443	49751	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.602018118 CET	49759	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.602060080 CET	443	49759	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.602061987 CET	49758	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.602091074 CET	443	49758	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.602154016 CET	49759	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.602241993 CET	49758	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.602313042 CET	49759	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.602324009 CET	443	49759	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.602360010 CET	49758	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.602369070 CET	443	49758	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.650918961 CET	443	49755	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.650990009 CET	443	49755	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.651045084 CET	49755	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.651235104 CET	49755	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.651249886 CET	443	49755	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.651264906 CET	49755	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.651271105 CET	443	49755	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.654458046 CET	49760	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.654494047 CET	443	49760	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.654882908 CET	49760	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.654915094 CET	49760	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.654921055 CET	443	49760	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.907279015 CET	443	49754	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.907360077 CET	443	49754	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.907443047 CET	49754	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.907598972 CET	49754	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.907623053 CET	443	49754	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.907658100 CET	49754	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.907665014 CET	443	49754	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.910602093 CET	49761	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.910634995 CET	443	49761	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.910736084 CET	49761	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.910907030 CET	49761	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.910918951 CET	443	49761	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.979825020 CET	443	49753	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.979897022 CET	443	49753	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.980123997 CET	49753	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.980232954 CET	49753	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.980257034 CET	443	49753	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.980274916 CET	49753	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.980282068 CET	443	49753	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.984046936 CET	49762	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.984086990 CET	443	49762	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:56.984281063 CET	49762	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.984468937 CET	49762	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:56.984486103 CET	443	49762	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:57.489083052 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:57.489120960 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:57.489142895 CET	49745	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:45:57.489151955 CET	443	49745	172.202.163.200	192.168.2.11
Nov 25, 2024 08:45:58.752968073 CET	443	49761	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.754292965 CET	49761	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:58.754323959 CET	443	49761	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.755665064 CET	49761	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:58.755671024 CET	443	49761	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.831981897 CET	443	49758	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.833085060 CET	49758	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:58.833085060 CET	49758	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:58.833103895 CET	443	49758	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.833115101 CET	443	49758	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.833379984 CET	443	49759	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.834027052 CET	49759	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:58.834027052 CET	49759	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:58.834060907 CET	443	49759	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.834079027 CET	443	49759	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.836045980 CET	443	49760	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.836766005 CET	49760	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:58.836766005 CET	49760	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:58.836806059 CET	443	49760	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.836827040 CET	443	49760	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.952095985 CET	443	49762	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.953254938 CET	49762	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:58.953254938 CET	49762	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:58.953288078 CET	443	49762	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:58.953304052 CET	443	49762	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.196165085 CET	443	49761	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.196233034 CET	443	49761	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.196501017 CET	49761	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.196501017 CET	49761	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.199347019 CET	49761	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.199362993 CET	443	49761	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.199405909 CET	49763	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.199428082 CET	443	49763	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.199646950 CET	49763	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.199646950 CET	49763	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.199675083 CET	443	49763	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.275198936 CET	443	49758	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.275293112 CET	443	49758	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.275629044 CET	49758	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.275629044 CET	49758	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.277034044 CET	443	49759	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.277067900 CET	49758	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.277086973 CET	443	49758	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.277100086 CET	443	49759	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.277371883 CET	49759	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.277371883 CET	49759	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.278225899 CET	49759	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.278239965 CET	443	49759	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.278738022 CET	443	49760	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.278841972 CET	443	49760	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.279762983 CET	49764	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.279803038 CET	443	49764	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.279851913 CET	49760	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.279851913 CET	49760	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.279851913 CET	49760	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.279934883 CET	49765	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.279959917 CET	443	49765	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.279982090 CET	49764	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.282239914 CET	49764	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.282239914 CET	49766	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.282267094 CET	443	49764	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.282282114 CET	443	49766	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.282457113 CET	49766	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.282461882 CET	49765	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.282461882 CET	49765	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.282491922 CET	443	49765	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.282510996 CET	49766	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.282521009 CET	443	49766	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.397608042 CET	443	49762	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.397686005 CET	443	49762	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.397929907 CET	49762	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.397929907 CET	49762	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.398152113 CET	49762	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.398173094 CET	443	49762	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.401285887 CET	49767	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.401324987 CET	443	49767	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.401412964 CET	49767	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.401576996 CET	49767	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.401590109 CET	443	49767	13.107.246.63	192.168.2.11
Nov 25, 2024 08:45:59.588861942 CET	49760	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:45:59.588911057 CET	443	49760	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:00.914199114 CET	443	49763	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:00.915118933 CET	49763	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:00.915133953 CET	443	49763	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:00.915620089 CET	49763	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:00.915625095 CET	443	49763	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:00.997416973 CET	443	49765	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:00.998013020 CET	49765	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:00.998034954 CET	443	49765	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:00.998070002 CET	443	49766	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:00.998330116 CET	49766	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:00.998363972 CET	443	49766	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:00.998532057 CET	49765	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:00.998539925 CET	443	49765	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:00.998868942 CET	49766	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:00.998878956 CET	443	49766	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.061013937 CET	443	49764	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.061537027 CET	49764	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.061554909 CET	443	49764	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.062020063 CET	49764	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.062026024 CET	443	49764	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.262841940 CET	443	49767	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.263417959 CET	49767	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.263432980 CET	443	49767	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.263874054 CET	49767	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.263879061 CET	443	49767	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.348582029 CET	443	49763	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.348660946 CET	443	49763	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.348731041 CET	49763	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.348954916 CET	49763	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.348972082 CET	443	49763	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.348985910 CET	49763	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.348993063 CET	443	49763	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.352016926 CET	49768	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.352066040 CET	443	49768	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.352153063 CET	49768	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.352377892 CET	49768	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.352392912 CET	443	49768	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.432365894 CET	443	49766	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.432450056 CET	443	49766	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.432538033 CET	49766	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.432847023 CET	49766	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.432878017 CET	443	49766	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.432893038 CET	49766	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.432900906 CET	443	49766	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.439421892 CET	49769	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.439470053 CET	443	49769	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.439539909 CET	49769	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.439784050 CET	49769	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.439800978 CET	443	49769	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.506608009 CET	443	49764	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.506685972 CET	443	49764	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.506753922 CET	49764	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.507184982 CET	49764	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.507215023 CET	443	49764	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.507230997 CET	49764	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.507240057 CET	443	49764	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.510617018 CET	49770	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.510628939 CET	443	49770	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.510720968 CET	49770	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.511006117 CET	49770	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.511023045 CET	443	49770	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.658936977 CET	443	49765	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.659729958 CET	443	49765	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.659810066 CET	49765	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.659873962 CET	49765	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.659888983 CET	443	49765	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.659904957 CET	49765	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.659910917 CET	443	49765	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.663239002 CET	49771	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.663283110 CET	443	49771	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.663367987 CET	49771	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.663561106 CET	49771	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.663570881 CET	443	49771	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.738281012 CET	443	49767	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.738357067 CET	443	49767	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.738449097 CET	49767	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.738774061 CET	49767	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.738789082 CET	443	49767	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.738822937 CET	49767	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.738827944 CET	443	49767	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.742523909 CET	49772	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.742556095 CET	443	49772	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:01.742701054 CET	49772	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.742911100 CET	49772	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:01.742923021 CET	443	49772	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.077085972 CET	443	49768	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.077666044 CET	49768	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.077692032 CET	443	49768	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.078110933 CET	49768	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.078118086 CET	443	49768	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.283426046 CET	443	49769	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.284035921 CET	49769	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.284055948 CET	443	49769	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.284531116 CET	49769	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.284534931 CET	443	49769	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.292687893 CET	443	49770	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.293001890 CET	49770	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.293020964 CET	443	49770	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.293359041 CET	49770	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.293364048 CET	443	49770	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.382208109 CET	443	49771	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.383227110 CET	49771	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.383234024 CET	443	49771	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.383744955 CET	49771	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.383749008 CET	443	49771	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.511457920 CET	443	49768	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.511543036 CET	443	49768	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.511786938 CET	49768	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.511845112 CET	49768	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.511864901 CET	443	49768	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.511904001 CET	49768	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.511912107 CET	443	49768	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.515132904 CET	49773	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.515198946 CET	443	49773	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.515274048 CET	49773	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.515454054 CET	49773	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.515470982 CET	443	49773	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.586077929 CET	443	49772	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.586817026 CET	49772	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.586833954 CET	443	49772	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.587234974 CET	49772	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.587240934 CET	443	49772	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.735793114 CET	443	49769	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.735975027 CET	443	49769	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.736067057 CET	443	49770	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.736145020 CET	443	49770	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.736155987 CET	49769	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.736196041 CET	49770	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.736264944 CET	49769	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.736283064 CET	443	49769	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.736294031 CET	49769	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.736299038 CET	443	49769	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.736383915 CET	49770	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.736406088 CET	443	49770	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.736417055 CET	49770	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.736424923 CET	443	49770	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.739537954 CET	49774	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.739574909 CET	443	49774	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.739593983 CET	49775	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.739634037 CET	443	49775	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.739701986 CET	49775	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.739758015 CET	49774	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.739878893 CET	49775	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.739878893 CET	49774	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.739892006 CET	443	49774	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.739897966 CET	443	49775	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.817950010 CET	443	49771	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.818027973 CET	443	49771	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.818169117 CET	49771	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.818334103 CET	49771	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.818350077 CET	443	49771	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.818360090 CET	49771	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.818366051 CET	443	49771	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.821496964 CET	49776	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.821532011 CET	443	49776	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:03.821670055 CET	49776	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.821846008 CET	49776	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:03.821854115 CET	443	49776	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:04.039593935 CET	443	49772	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:04.039685011 CET	443	49772	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:04.039961100 CET	49772	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:04.039961100 CET	49772	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:04.040050030 CET	49772	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:04.040071964 CET	443	49772	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:04.043850899 CET	49777	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:04.043911934 CET	443	49777	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:04.044006109 CET	49777	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:04.044207096 CET	49777	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:04.044224024 CET	443	49777	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.384581089 CET	443	49773	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.385333061 CET	49773	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.385369062 CET	443	49773	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.385948896 CET	49773	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.385962963 CET	443	49773	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.459765911 CET	443	49774	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.460558891 CET	49774	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.460599899 CET	443	49774	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.461138964 CET	49774	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.461158991 CET	443	49774	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.536468029 CET	443	49776	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.537230015 CET	49776	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.537245989 CET	443	49776	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.537869930 CET	49776	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.537874937 CET	443	49776	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.582730055 CET	443	49775	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.583272934 CET	49775	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.583300114 CET	443	49775	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.583821058 CET	49775	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.583827019 CET	443	49775	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.836874008 CET	443	49773	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.836991072 CET	443	49773	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.837050915 CET	49773	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.837337017 CET	49773	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.837337017 CET	49773	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.837356091 CET	443	49773	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.837364912 CET	443	49773	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.840348005 CET	49778	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.840393066 CET	443	49778	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.840482950 CET	49778	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.840636969 CET	49778	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.840646029 CET	443	49778	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.888349056 CET	443	49777	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.888952971 CET	49777	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.888998032 CET	443	49777	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.889470100 CET	49777	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.889478922 CET	443	49777	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.893632889 CET	443	49774	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.893795013 CET	443	49774	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.893878937 CET	49774	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.893956900 CET	49774	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.893975019 CET	443	49774	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.894002914 CET	49774	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.894009113 CET	443	49774	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.896848917 CET	49779	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.896904945 CET	443	49779	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.896996021 CET	49779	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.897164106 CET	49779	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.897182941 CET	443	49779	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.970741034 CET	443	49776	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.970813036 CET	443	49776	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.970865965 CET	49776	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.971023083 CET	49776	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.971038103 CET	443	49776	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.971054077 CET	49776	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.971059084 CET	443	49776	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.973474026 CET	49780	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.973510027 CET	443	49780	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:05.973591089 CET	49780	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.973716974 CET	49780	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:05.973730087 CET	443	49780	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.035434008 CET	443	49775	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.035507917 CET	443	49775	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.035578012 CET	49775	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.035778999 CET	49775	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.035792112 CET	443	49775	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.035799026 CET	49775	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.035804987 CET	443	49775	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.038748026 CET	49781	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.038785934 CET	443	49781	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.038892031 CET	49781	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.039033890 CET	49781	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.039051056 CET	443	49781	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.340543032 CET	443	49777	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.340615988 CET	443	49777	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.340672970 CET	49777	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.340857983 CET	49777	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.340881109 CET	443	49777	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.340900898 CET	49777	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.340907097 CET	443	49777	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.343954086 CET	49782	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.344000101 CET	443	49782	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:06.344088078 CET	49782	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.344295979 CET	49782	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:06.344315052 CET	443	49782	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.619993925 CET	443	49778	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.620692015 CET	49778	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:07.620731115 CET	443	49778	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.621222019 CET	49778	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:07.621229887 CET	443	49778	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.682589054 CET	443	49779	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.683229923 CET	49779	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:07.683255911 CET	443	49779	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.683692932 CET	49779	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:07.683697939 CET	443	49779	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.757922888 CET	443	49780	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.758541107 CET	49780	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:07.758569002 CET	443	49780	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.759001970 CET	49780	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:07.759010077 CET	443	49780	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.882121086 CET	443	49781	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.882925987 CET	49781	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:07.882956982 CET	443	49781	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:07.883333921 CET	49781	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:07.883341074 CET	443	49781	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.058295965 CET	443	49782	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.058945894 CET	49782	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.058964014 CET	443	49782	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.059410095 CET	49782	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.059416056 CET	443	49782	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.064086914 CET	443	49778	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.064155102 CET	443	49778	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.064222097 CET	49778	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.064402103 CET	49778	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.064414978 CET	443	49778	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.064429998 CET	49778	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.064435959 CET	443	49778	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.067369938 CET	49783	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.067415953 CET	443	49783	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.067518950 CET	49783	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.067712069 CET	49783	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.067725897 CET	443	49783	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.125972033 CET	443	49779	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.126126051 CET	443	49779	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.126200914 CET	49779	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.126413107 CET	49779	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.126430988 CET	443	49779	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.126444101 CET	49779	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.126449108 CET	443	49779	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.130176067 CET	49784	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.130208969 CET	443	49784	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.130311966 CET	49784	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.130533934 CET	49784	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.130553961 CET	443	49784	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.201077938 CET	443	49780	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.201168060 CET	443	49780	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.201246977 CET	49780	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.201502085 CET	49780	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.201514959 CET	443	49780	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.201545000 CET	49780	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.201550961 CET	443	49780	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.204847097 CET	49785	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.204905033 CET	443	49785	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.205023050 CET	49785	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.205243111 CET	49785	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.205260038 CET	443	49785	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.335475922 CET	443	49781	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.335551023 CET	443	49781	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.335627079 CET	49781	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.335886002 CET	49781	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.335886002 CET	49781	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.335902929 CET	443	49781	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.335912943 CET	443	49781	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.339303017 CET	49786	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.339345932 CET	443	49786	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.339622021 CET	49786	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.339754105 CET	49786	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.339782000 CET	443	49786	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.493156910 CET	443	49782	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.493237019 CET	443	49782	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.493313074 CET	49782	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.493587017 CET	49782	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.493601084 CET	443	49782	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.493612051 CET	49782	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.493618011 CET	443	49782	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.497061014 CET	49787	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.497112036 CET	443	49787	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:08.497208118 CET	49787	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.497406006 CET	49787	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:08.497414112 CET	443	49787	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:09.717492104 CET	443	49784	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:09.718156099 CET	49784	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:09.718168020 CET	443	49784	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:09.718569994 CET	49784	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:09.718576908 CET	443	49784	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:09.911345005 CET	443	49783	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:09.911948919 CET	49783	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:09.911963940 CET	443	49783	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:09.912429094 CET	49783	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:09.912434101 CET	443	49783	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:09.984505892 CET	443	49785	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:09.985135078 CET	49785	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:09.985160112 CET	443	49785	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:09.985605955 CET	49785	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:09.985613108 CET	443	49785	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.060911894 CET	443	49786	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.061611891 CET	49786	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.061630011 CET	443	49786	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.062063932 CET	49786	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.062068939 CET	443	49786	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.159945965 CET	443	49784	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.160130024 CET	443	49784	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.160285950 CET	49784	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.160378933 CET	49784	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.160398960 CET	443	49784	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.160506010 CET	49784	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.160514116 CET	443	49784	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.163393021 CET	49788	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.163422108 CET	443	49788	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.163532019 CET	49788	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.163691998 CET	49788	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.163706064 CET	443	49788	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.305969000 CET	443	49787	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.306411028 CET	49787	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.306427002 CET	443	49787	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.306885958 CET	49787	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.306891918 CET	443	49787	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.620316982 CET	443	49783	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.620397091 CET	443	49783	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.620446920 CET	49783	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.620707989 CET	49783	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.620707989 CET	49783	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.620764017 CET	443	49783	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.620773077 CET	443	49783	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.620924950 CET	443	49785	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.620929956 CET	443	49786	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.620985031 CET	443	49785	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.620994091 CET	443	49786	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.621023893 CET	49785	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.621073961 CET	49786	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.621196985 CET	49785	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.621196985 CET	49785	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.621218920 CET	443	49785	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.621227026 CET	443	49785	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.621819019 CET	49786	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.621834993 CET	443	49786	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.621870041 CET	49786	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.621876001 CET	443	49786	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.624594927 CET	49789	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.624618053 CET	443	49789	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.624675989 CET	49789	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.624965906 CET	49790	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.624986887 CET	443	49790	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.625030041 CET	49789	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.625041962 CET	443	49789	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.625042915 CET	49790	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.625119925 CET	49790	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.625144958 CET	443	49790	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.625614882 CET	49791	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.625623941 CET	443	49791	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.625677109 CET	49791	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.625844955 CET	49791	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.625855923 CET	443	49791	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.948241949 CET	443	49787	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.948318005 CET	443	49787	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.948400974 CET	49787	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.948708057 CET	49787	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.948715925 CET	443	49787	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.948728085 CET	49787	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.948734999 CET	443	49787	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.952028036 CET	49792	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.952058077 CET	443	49792	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:10.952124119 CET	49792	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.952306032 CET	49792	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:10.952321053 CET	443	49792	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.165816069 CET	443	49788	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.166527987 CET	49788	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.166547060 CET	443	49788	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.167011023 CET	49788	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.167016029 CET	443	49788	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.349400043 CET	443	49791	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.349904060 CET	443	49790	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.349917889 CET	443	49789	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.350092888 CET	49791	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.350122929 CET	443	49791	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.350300074 CET	49790	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.350318909 CET	443	49790	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.350807905 CET	49791	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.350814104 CET	443	49791	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.350863934 CET	49790	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.350869894 CET	443	49790	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.350908041 CET	49789	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.350917101 CET	443	49789	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.351263046 CET	49789	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.351269007 CET	443	49789	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.608103991 CET	443	49788	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.608180046 CET	443	49788	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.608259916 CET	49788	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.608508110 CET	49788	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.608522892 CET	443	49788	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.608534098 CET	49788	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.608539104 CET	443	49788	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.611291885 CET	49793	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.611341953 CET	443	49793	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.611437082 CET	49793	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.611624956 CET	49793	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.611639977 CET	443	49793	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.733593941 CET	443	49792	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.734215975 CET	49792	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.734236002 CET	443	49792	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.734611988 CET	49792	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.734616041 CET	443	49792	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.789149046 CET	443	49791	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.789190054 CET	443	49789	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.789237976 CET	443	49791	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.789259911 CET	443	49789	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.789321899 CET	49791	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.789323092 CET	49789	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.789501905 CET	49791	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.789532900 CET	443	49791	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.789556980 CET	49791	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.789570093 CET	443	49791	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.790679932 CET	49789	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.790688992 CET	443	49789	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.790699959 CET	49789	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.790704966 CET	443	49789	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.793483973 CET	49794	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.793519020 CET	443	49794	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.793621063 CET	49794	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.793979883 CET	49794	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.793994904 CET	443	49794	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.794559002 CET	49795	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.794608116 CET	443	49795	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.794665098 CET	49795	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.794770956 CET	49795	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.794786930 CET	443	49795	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.821997881 CET	443	49790	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.822063923 CET	443	49790	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.822122097 CET	49790	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.822305918 CET	49790	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.822324991 CET	443	49790	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.822335005 CET	49790	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.822344065 CET	443	49790	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.824934006 CET	49796	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.824959993 CET	443	49796	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:12.825020075 CET	49796	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.825166941 CET	49796	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:12.825175047 CET	443	49796	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:13.176855087 CET	443	49792	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:13.176934004 CET	443	49792	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:13.177143097 CET	49792	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:13.177373886 CET	49792	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:13.177373886 CET	49792	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:13.177393913 CET	443	49792	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:13.177402973 CET	443	49792	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:13.180479050 CET	49797	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:13.180516958 CET	443	49797	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:13.180608988 CET	49797	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:13.180799961 CET	49797	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:13.180814028 CET	443	49797	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.395009041 CET	443	49793	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.395695925 CET	49793	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.395719051 CET	443	49793	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.396142960 CET	49793	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.396148920 CET	443	49793	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.585553885 CET	443	49795	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.586190939 CET	49795	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.586219072 CET	443	49795	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.586639881 CET	49795	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.586647034 CET	443	49795	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.602539062 CET	443	49796	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.602962971 CET	49796	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.602994919 CET	443	49796	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.603290081 CET	49796	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.603296995 CET	443	49796	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.640289068 CET	443	49794	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.640880108 CET	49794	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.640893936 CET	443	49794	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.641335011 CET	49794	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.641340017 CET	443	49794	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.837243080 CET	443	49793	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.837316036 CET	443	49793	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.837490082 CET	49793	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.837754011 CET	49793	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.837775946 CET	443	49793	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.837791920 CET	49793	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.837800026 CET	443	49793	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.840974092 CET	49798	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.841032028 CET	443	49798	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.841147900 CET	49798	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.841274023 CET	49798	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.841294050 CET	443	49798	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.959809065 CET	443	49797	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.960444927 CET	49797	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.960470915 CET	443	49797	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:14.960937023 CET	49797	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:14.960944891 CET	443	49797	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.030606985 CET	443	49795	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.030693054 CET	443	49795	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.030775070 CET	49795	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.031016111 CET	49795	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.031033039 CET	443	49795	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.031044960 CET	49795	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.031050920 CET	443	49795	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.033981085 CET	49799	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.034018040 CET	443	49799	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.034245014 CET	49799	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.034420967 CET	49799	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.034434080 CET	443	49799	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.064546108 CET	443	49796	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.064615011 CET	443	49796	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.064806938 CET	49796	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.064949036 CET	49796	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.064966917 CET	443	49796	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.064982891 CET	49796	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.064991951 CET	443	49796	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.068134069 CET	49800	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.068161964 CET	443	49800	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.068259954 CET	49800	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.068422079 CET	49800	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.068434954 CET	443	49800	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.094007015 CET	443	49794	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.094084024 CET	443	49794	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.094211102 CET	49794	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.094356060 CET	49794	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.094356060 CET	49794	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.094368935 CET	443	49794	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.094372988 CET	443	49794	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.097290039 CET	49801	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.097322941 CET	443	49801	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.097412109 CET	49801	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.097565889 CET	49801	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.097579956 CET	443	49801	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.410790920 CET	443	49797	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.410861969 CET	443	49797	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.411099911 CET	49797	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.411145926 CET	49797	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.411145926 CET	49797	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.411165953 CET	443	49797	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.411175013 CET	443	49797	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.414037943 CET	49802	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.414066076 CET	443	49802	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:15.414160013 CET	49802	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.414330006 CET	49802	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:15.414343119 CET	443	49802	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:16.689344883 CET	443	49798	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:16.689979076 CET	49798	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:16.690015078 CET	443	49798	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:16.690473080 CET	49798	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:16.690480947 CET	443	49798	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:16.855194092 CET	443	49799	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:16.856003046 CET	49799	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:16.856028080 CET	443	49799	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:16.856520891 CET	49799	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:16.856528044 CET	443	49799	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.068558931 CET	443	49801	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.069237947 CET	49801	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.069264889 CET	443	49801	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.069267988 CET	443	49800	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.069571972 CET	49800	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.069592953 CET	443	49800	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.069720030 CET	49801	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.069741964 CET	443	49801	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.070043087 CET	49800	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.070048094 CET	443	49800	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.144517899 CET	443	49798	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.144592047 CET	443	49798	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.144690990 CET	49798	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.144865990 CET	49798	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.144865990 CET	49798	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.144882917 CET	443	49798	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.144893885 CET	443	49798	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.148085117 CET	49803	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.148128986 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.148226023 CET	49803	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.148413897 CET	49803	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.148427963 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.203134060 CET	443	49802	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.203766108 CET	49802	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.203788042 CET	443	49802	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.204276085 CET	49802	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.204282045 CET	443	49802	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.289222956 CET	443	49799	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.289288044 CET	443	49799	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.289402962 CET	49799	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.289638996 CET	49799	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.289654970 CET	443	49799	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.289664984 CET	49799	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.289669991 CET	443	49799	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.292680979 CET	49804	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.292726994 CET	443	49804	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.292809963 CET	49804	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.293057919 CET	49804	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.293072939 CET	443	49804	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.513320923 CET	443	49801	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.513403893 CET	443	49801	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.513483047 CET	49801	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.513700008 CET	49801	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.513725996 CET	443	49801	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.513739109 CET	49801	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.513745070 CET	443	49801	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.515357971 CET	443	49800	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.515431881 CET	443	49800	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.515487909 CET	49800	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.515588999 CET	49800	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.515604973 CET	443	49800	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.515614986 CET	49800	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.515619993 CET	443	49800	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.517091990 CET	49805	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.517127991 CET	443	49805	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.517352104 CET	49805	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.517352104 CET	49805	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.517383099 CET	443	49805	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.517663956 CET	49806	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.517685890 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.517760992 CET	49806	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.517918110 CET	49806	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.517926931 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.648433924 CET	443	49802	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.648505926 CET	443	49802	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.648570061 CET	49802	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.648785114 CET	49802	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.648823977 CET	443	49802	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.648852110 CET	49802	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.648868084 CET	443	49802	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.651839972 CET	49807	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.651870012 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:17.651948929 CET	49807	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.652143955 CET	49807	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:17.652156115 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:18.862384081 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:18.863100052 CET	49803	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:18.863147974 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:18.863574028 CET	49803	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:18.863580942 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.073019981 CET	443	49804	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.073710918 CET	49804	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.073728085 CET	443	49804	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.074286938 CET	49804	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.074291945 CET	443	49804	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.295969009 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.296530008 CET	49806	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.296555042 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.296988964 CET	49806	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.296997070 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.301867008 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.301918030 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.301975965 CET	49803	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.301994085 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.302064896 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.302112103 CET	49803	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.302222967 CET	49803	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.302237988 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.302248001 CET	49803	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.302253008 CET	443	49803	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.305022955 CET	49808	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.305049896 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.305130959 CET	49808	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.305313110 CET	49808	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.305325985 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.362257004 CET	443	49805	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.362950087 CET	49805	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.362966061 CET	443	49805	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.363418102 CET	49805	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.363424063 CET	443	49805	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.432771921 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.433410883 CET	49807	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.433437109 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.433824062 CET	49807	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.433830976 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.515706062 CET	443	49804	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.515780926 CET	443	49804	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.515888929 CET	49804	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.516220093 CET	49804	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.516237020 CET	443	49804	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.516252995 CET	49804	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.516259909 CET	443	49804	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.520001888 CET	49809	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.520052910 CET	443	49809	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.520176888 CET	49809	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.520425081 CET	49809	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.520436049 CET	443	49809	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.749015093 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.749027014 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.749088049 CET	49806	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.749108076 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.749376059 CET	49806	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.749394894 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.749401093 CET	49806	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.749577999 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.749605894 CET	443	49806	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.749663115 CET	49806	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.752276897 CET	49810	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.752331018 CET	443	49810	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.752408981 CET	49810	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.752646923 CET	49810	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.752662897 CET	443	49810	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.832781076 CET	443	49805	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.832858086 CET	443	49805	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.832990885 CET	49805	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.833239079 CET	49805	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.833273888 CET	443	49805	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.833286047 CET	49805	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.833292007 CET	443	49805	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.836443901 CET	49811	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.836487055 CET	443	49811	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.836566925 CET	49811	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.836776018 CET	49811	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.836791039 CET	443	49811	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.881125927 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.881159067 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.881211042 CET	49807	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.881239891 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.881334066 CET	49807	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.881676912 CET	49807	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.881676912 CET	49807	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.881689072 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.881869078 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.881902933 CET	443	49807	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.881942034 CET	49807	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.884355068 CET	49812	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.884391069 CET	443	49812	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:19.884473085 CET	49812	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.884700060 CET	49812	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:19.884716988 CET	443	49812	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.149558067 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.150240898 CET	49808	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.150259972 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.150711060 CET	49808	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.150715113 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.236072063 CET	443	49809	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.236571074 CET	49809	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.236627102 CET	443	49809	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.237025023 CET	49809	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.237037897 CET	443	49809	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.554590940 CET	443	49811	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.555327892 CET	49811	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.555347919 CET	443	49811	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.555795908 CET	49811	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.555800915 CET	443	49811	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.596582890 CET	443	49810	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.597264051 CET	49810	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.597294092 CET	443	49810	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.597671032 CET	49810	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.597677946 CET	443	49810	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.607115030 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.607146978 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.607255936 CET	49808	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.607273102 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.607559919 CET	49808	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.607584953 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.607595921 CET	49808	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.607727051 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.607760906 CET	443	49808	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.607800961 CET	49808	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.610408068 CET	49813	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.610440969 CET	443	49813	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.610523939 CET	49813	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.610709906 CET	49813	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.610723019 CET	443	49813	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.667581081 CET	443	49812	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.668423891 CET	49812	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.668438911 CET	443	49812	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.669469118 CET	49812	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.669476032 CET	443	49812	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.670167923 CET	443	49809	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.673346043 CET	443	49809	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.673418045 CET	49809	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.673475981 CET	49809	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.673504114 CET	443	49809	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.673525095 CET	49809	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.673532963 CET	443	49809	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.676856041 CET	49814	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.676892042 CET	443	49814	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.677083969 CET	49814	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.677220106 CET	49814	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.677231073 CET	443	49814	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.988079071 CET	443	49811	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.991169930 CET	443	49811	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.991238117 CET	49811	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.991300106 CET	49811	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.991323948 CET	443	49811	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.991338015 CET	49811	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.991343975 CET	443	49811	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.994168043 CET	49815	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.994200945 CET	443	49815	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:21.994259119 CET	49815	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.994426966 CET	49815	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:21.994440079 CET	443	49815	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.049213886 CET	443	49810	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.052318096 CET	443	49810	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.052402973 CET	49810	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.052454948 CET	49810	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.052474022 CET	443	49810	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.052484035 CET	49810	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.052490950 CET	443	49810	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.055298090 CET	49816	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.055341959 CET	443	49816	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.055407047 CET	49816	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.055579901 CET	49816	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.055593014 CET	443	49816	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.110415936 CET	443	49812	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.114025116 CET	443	49812	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.114172935 CET	49812	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.114172935 CET	49812	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.114172935 CET	49812	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.117106915 CET	49817	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.117175102 CET	443	49817	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.117265940 CET	49817	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.117418051 CET	49817	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.117425919 CET	443	49817	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:22.340084076 CET	49812	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:22.340109110 CET	443	49812	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.392122984 CET	443	49814	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.392867088 CET	49814	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.392879963 CET	443	49814	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.392967939 CET	443	49813	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.393318892 CET	49813	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.393332958 CET	443	49813	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.393368959 CET	49814	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.393373013 CET	443	49814	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.393976927 CET	49813	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.393981934 CET	443	49813	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.825520992 CET	443	49814	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.829049110 CET	443	49814	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.829178095 CET	49814	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.829209089 CET	49814	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.829209089 CET	49814	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.829226017 CET	443	49814	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.829235077 CET	443	49814	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.832851887 CET	49818	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.832887888 CET	443	49818	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.833092928 CET	49818	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.833178997 CET	49818	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.833189964 CET	443	49818	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.835581064 CET	443	49813	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.838052988 CET	443	49815	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.838516951 CET	49815	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.838529110 CET	443	49815	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.839138031 CET	443	49813	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.839174032 CET	49815	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.839179039 CET	443	49815	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.839195967 CET	49813	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.839226961 CET	49813	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.839238882 CET	443	49813	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.839247942 CET	49813	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.839253902 CET	443	49813	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.840142965 CET	443	49816	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.840451956 CET	49816	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.840461016 CET	443	49816	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.840939045 CET	49816	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.840945959 CET	443	49816	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.842272997 CET	49819	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.842302084 CET	443	49819	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.842391968 CET	49819	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.842632055 CET	49819	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.842643023 CET	443	49819	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.896586895 CET	443	49817	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.897303104 CET	49817	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.897311926 CET	443	49817	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:23.897936106 CET	49817	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:23.897949934 CET	443	49817	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.283504009 CET	443	49816	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.286634922 CET	443	49816	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.286700010 CET	49816	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.286792040 CET	49816	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.286808014 CET	443	49816	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.290210962 CET	49820	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.290239096 CET	443	49820	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.290313005 CET	49820	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.290549040 CET	443	49815	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.290553093 CET	49820	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.290563107 CET	443	49820	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.293900013 CET	443	49815	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.293958902 CET	49815	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.294102907 CET	49815	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.294112921 CET	443	49815	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.294123888 CET	49815	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.294133902 CET	443	49815	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.296809912 CET	49821	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.296840906 CET	443	49821	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.296910048 CET	49821	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.297123909 CET	49821	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.297135115 CET	443	49821	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.339953899 CET	443	49817	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.343404055 CET	443	49817	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.343612909 CET	49817	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.343612909 CET	49817	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.343612909 CET	49817	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.346771002 CET	49822	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.346797943 CET	443	49822	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.346869946 CET	49822	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.347099066 CET	49822	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.347110987 CET	443	49822	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:24.652760983 CET	49817	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:24.652777910 CET	443	49817	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:25.558124065 CET	443	49818	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:25.558814049 CET	49818	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:25.558834076 CET	443	49818	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:25.559463978 CET	49818	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:25.559474945 CET	443	49818	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:25.633353949 CET	443	49819	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:25.634183884 CET	49819	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:25.634202003 CET	443	49819	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:25.635200977 CET	49819	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:25.635207891 CET	443	49819	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:25.994070053 CET	443	49818	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:25.997229099 CET	443	49818	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:25.997318029 CET	49818	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:25.997370958 CET	49818	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:25.997379065 CET	443	49818	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:25.997394085 CET	49818	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:25.997399092 CET	443	49818	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.000549078 CET	49823	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.000574112 CET	443	49823	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.000653982 CET	49823	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.000869036 CET	49823	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.000880957 CET	443	49823	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.076536894 CET	443	49819	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.079771996 CET	443	49819	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.079854965 CET	443	49819	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.079899073 CET	49819	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.079948902 CET	49819	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.080050945 CET	49819	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.080050945 CET	49819	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.080065966 CET	443	49819	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.080074072 CET	443	49819	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.083226919 CET	49824	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.083272934 CET	443	49824	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.083486080 CET	49824	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.083729029 CET	49824	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.083744049 CET	443	49824	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.101012945 CET	443	49821	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.101397038 CET	49821	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.101424932 CET	443	49821	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.101839066 CET	49821	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.101852894 CET	443	49821	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.126646996 CET	443	49822	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.127139091 CET	49822	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.127154112 CET	443	49822	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.127578020 CET	49822	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.127583981 CET	443	49822	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.135921001 CET	443	49820	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.136450052 CET	49820	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.136465073 CET	443	49820	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.136878967 CET	49820	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.136883974 CET	443	49820	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.548254013 CET	443	49821	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.551629066 CET	443	49821	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.551686049 CET	443	49821	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.551718950 CET	49821	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.551763058 CET	49821	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.551836967 CET	49821	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.551848888 CET	443	49821	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.551862001 CET	49821	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.551867008 CET	443	49821	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.555143118 CET	49825	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.555159092 CET	443	49825	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.555228949 CET	49825	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.555435896 CET	49825	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.555445910 CET	443	49825	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.573100090 CET	443	49822	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.576035976 CET	443	49822	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.576134920 CET	49822	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.576175928 CET	49822	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.576190948 CET	443	49822	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.576205969 CET	49822	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.576211929 CET	443	49822	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.579377890 CET	49826	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.579421997 CET	443	49826	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.579504013 CET	49826	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.579690933 CET	49826	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.579703093 CET	443	49826	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.588361025 CET	443	49820	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.591526985 CET	443	49820	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.591618061 CET	49820	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.591664076 CET	49820	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.591672897 CET	443	49820	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.591684103 CET	49820	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.591689110 CET	443	49820	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.595539093 CET	49827	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.595586061 CET	443	49827	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:26.595698118 CET	49827	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.595969915 CET	49827	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:26.595979929 CET	443	49827	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:27.136384964 CET	49712	80	192.168.2.11	5.230.35.39
Nov 25, 2024 08:46:27.136384964 CET	49711	80	192.168.2.11	5.230.35.39
Nov 25, 2024 08:46:27.510217905 CET	80	49712	5.230.35.39	192.168.2.11
Nov 25, 2024 08:46:27.510236025 CET	80	49711	5.230.35.39	192.168.2.11
Nov 25, 2024 08:46:28.039505959 CET	443	49823	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.040247917 CET	49823	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.040268898 CET	443	49823	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.040723085 CET	49823	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.040730953 CET	443	49823	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.044472933 CET	443	49824	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.044887066 CET	49824	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.044909954 CET	443	49824	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.045257092 CET	49824	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.045263052 CET	443	49824	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.297514915 CET	443	49826	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.299298048 CET	49826	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.299331903 CET	443	49826	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.299760103 CET	49826	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.299766064 CET	443	49826	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.335334063 CET	443	49825	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.336658001 CET	49825	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.336673021 CET	443	49825	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.337111950 CET	49825	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.337117910 CET	443	49825	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.439002991 CET	443	49827	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.439630985 CET	49827	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.439639091 CET	443	49827	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.440119028 CET	49827	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.440123081 CET	443	49827	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.483011007 CET	443	49823	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.483078957 CET	443	49823	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.483163118 CET	49823	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.483375072 CET	49823	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.483386993 CET	443	49823	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.483397961 CET	49823	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.483402967 CET	443	49823	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.486175060 CET	443	49824	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.486455917 CET	49828	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.486479044 CET	443	49828	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.486548901 CET	49828	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.486712933 CET	49828	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.486721992 CET	443	49828	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.490472078 CET	443	49824	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.490525007 CET	49824	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.490556955 CET	49824	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.490566015 CET	443	49824	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.490572929 CET	49824	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.490576982 CET	443	49824	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.492561102 CET	49829	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.492579937 CET	443	49829	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.492649078 CET	49829	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.492779016 CET	49829	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.492789030 CET	443	49829	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.734817028 CET	443	49826	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.737894058 CET	443	49826	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.737972021 CET	49826	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.738008976 CET	49826	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.738023043 CET	443	49826	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.738037109 CET	49826	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.738042116 CET	443	49826	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.740914106 CET	49830	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.740946054 CET	443	49830	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.741010904 CET	49830	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.741163969 CET	49830	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.741175890 CET	443	49830	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.789252043 CET	443	49825	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.789283991 CET	443	49825	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.789335012 CET	443	49825	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.789333105 CET	49825	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.789386988 CET	49825	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.789666891 CET	49825	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.789679050 CET	443	49825	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.789691925 CET	49825	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.789697886 CET	443	49825	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.793030977 CET	49831	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.793071985 CET	443	49831	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.793137074 CET	49831	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.793319941 CET	49831	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.793334007 CET	443	49831	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.891942024 CET	443	49827	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.895083904 CET	443	49827	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.895152092 CET	49827	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.895231009 CET	49827	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.895241022 CET	443	49827	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.895252943 CET	49827	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.895257950 CET	443	49827	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.898045063 CET	49832	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.898083925 CET	443	49832	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:28.898156881 CET	49832	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.898298979 CET	49832	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:28.898308992 CET	443	49832	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.210181952 CET	443	49828	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.210769892 CET	49828	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.210787058 CET	443	49828	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.211231947 CET	49828	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.211237907 CET	443	49828	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.271301985 CET	443	49829	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.271970987 CET	49829	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.272007942 CET	443	49829	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.272442102 CET	49829	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.272449970 CET	443	49829	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.526112080 CET	443	49830	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.527291059 CET	49830	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.527291059 CET	49830	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.527323008 CET	443	49830	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.527338028 CET	443	49830	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.612010002 CET	443	49832	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.612696886 CET	49832	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.612725973 CET	443	49832	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.613161087 CET	49832	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.613167048 CET	443	49832	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.613189936 CET	443	49831	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.613468885 CET	49831	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.613506079 CET	443	49831	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.613799095 CET	49831	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.613805056 CET	443	49831	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.645334959 CET	443	49828	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.648798943 CET	443	49828	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.648895025 CET	49828	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.648963928 CET	49828	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.648977995 CET	443	49828	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.648988008 CET	49828	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.648993969 CET	443	49828	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.653371096 CET	49833	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.653408051 CET	443	49833	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.653580904 CET	49833	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.654649019 CET	49833	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.654659986 CET	443	49833	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.714723110 CET	443	49829	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.717920065 CET	443	49829	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.717963934 CET	443	49829	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.717995882 CET	49829	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.718030930 CET	49829	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.718085051 CET	49829	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.718095064 CET	443	49829	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.718101025 CET	49829	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.718106031 CET	443	49829	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.720984936 CET	49834	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.721033096 CET	443	49834	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.721106052 CET	49834	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.721247911 CET	49834	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.721266985 CET	443	49834	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.968985081 CET	443	49830	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.972235918 CET	443	49830	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.972312927 CET	49830	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.972372055 CET	49830	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.972398043 CET	443	49830	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.972413063 CET	49830	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.972423077 CET	443	49830	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.975219011 CET	49835	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.975254059 CET	443	49835	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:30.975383043 CET	49835	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.975470066 CET	49835	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:30.975481987 CET	443	49835	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.046690941 CET	443	49832	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.049577951 CET	443	49832	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.049681902 CET	49832	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.049721003 CET	49832	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.049721003 CET	49832	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.049741030 CET	443	49832	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.049751997 CET	443	49832	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.052748919 CET	49836	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.052788019 CET	443	49836	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.052871943 CET	49836	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.053086996 CET	49836	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.053096056 CET	443	49836	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.057110071 CET	443	49831	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.059967041 CET	443	49831	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.060019016 CET	443	49831	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.060034990 CET	49831	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.060079098 CET	49831	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.060132980 CET	49831	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.060148001 CET	443	49831	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.060157061 CET	49831	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.060163021 CET	443	49831	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.062726974 CET	49837	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.062758923 CET	443	49837	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:31.062840939 CET	49837	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.062995911 CET	49837	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:31.063007116 CET	443	49837	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.446139097 CET	443	49834	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.446615934 CET	49834	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.446647882 CET	443	49834	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.447072983 CET	49834	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.447079897 CET	443	49834	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.497771978 CET	443	49833	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.498390913 CET	49833	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.498402119 CET	443	49833	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.498758078 CET	49833	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.498771906 CET	443	49833	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.765671968 CET	443	49836	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.766293049 CET	49836	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.766308069 CET	443	49836	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.766757011 CET	49836	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.766777039 CET	443	49836	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.821130037 CET	443	49835	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.822041035 CET	49835	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.822052956 CET	443	49835	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.822248936 CET	49835	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.822259903 CET	443	49835	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.841257095 CET	443	49837	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.841753960 CET	49837	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.841770887 CET	443	49837	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.842350006 CET	49837	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.842355013 CET	443	49837	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.904509068 CET	443	49834	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.907630920 CET	443	49834	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.907691956 CET	49834	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.907735109 CET	49834	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.907757044 CET	443	49834	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.907768011 CET	49834	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.907776117 CET	443	49834	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.910752058 CET	49838	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.910797119 CET	443	49838	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.910854101 CET	49838	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.911022902 CET	49838	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.911039114 CET	443	49838	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.951021910 CET	443	49833	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.951097965 CET	443	49833	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.951186895 CET	49833	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.952393055 CET	49833	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.952393055 CET	49833	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.952411890 CET	443	49833	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.952420950 CET	443	49833	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.954469919 CET	49839	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.954523087 CET	443	49839	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:32.954596043 CET	49839	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.954794884 CET	49839	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:32.954803944 CET	443	49839	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.199728012 CET	443	49836	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.203547001 CET	443	49836	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.203603983 CET	49836	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.203668118 CET	49836	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.203681946 CET	443	49836	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.203695059 CET	49836	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.203701019 CET	443	49836	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.207336903 CET	49840	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.207384109 CET	443	49840	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.207518101 CET	49840	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.207659960 CET	49840	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.207673073 CET	443	49840	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.274482012 CET	443	49835	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.277563095 CET	443	49835	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.277615070 CET	443	49835	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.277733088 CET	49835	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.277733088 CET	49835	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.277733088 CET	49835	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.277827978 CET	49835	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.277843952 CET	443	49835	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.280607939 CET	49841	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.280642986 CET	443	49841	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.280704975 CET	49841	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.280842066 CET	49841	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.280854940 CET	443	49841	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.287203074 CET	443	49837	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.290349960 CET	443	49837	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.290409088 CET	49837	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.290438890 CET	49837	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.290452003 CET	443	49837	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.293224096 CET	49842	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.293252945 CET	443	49842	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.293461084 CET	49842	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.293600082 CET	49842	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:33.293610096 CET	443	49842	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:33.936338902 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:33.936397076 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:33.936477900 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:33.937091112 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:33.937103987 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:34.521490097 CET	80	49712	5.230.35.39	192.168.2.11
Nov 25, 2024 08:46:34.521617889 CET	49712	80	192.168.2.11	5.230.35.39
Nov 25, 2024 08:46:34.686391115 CET	80	49711	5.230.35.39	192.168.2.11
Nov 25, 2024 08:46:34.686469078 CET	49711	80	192.168.2.11	5.230.35.39
Nov 25, 2024 08:46:34.760004044 CET	443	49838	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:34.760641098 CET	49838	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:34.760675907 CET	443	49838	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:34.761120081 CET	49838	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:34.761127949 CET	443	49838	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:34.803668022 CET	443	49839	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:34.804258108 CET	49839	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:34.804275990 CET	443	49839	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:34.804735899 CET	49839	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:34.804743052 CET	443	49839	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:34.922231913 CET	443	49840	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:34.922940969 CET	49840	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:34.922951937 CET	443	49840	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:34.923280954 CET	49840	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:34.923286915 CET	443	49840	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.012044907 CET	443	49842	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.012635946 CET	49842	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.012653112 CET	443	49842	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.013130903 CET	49842	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.013138056 CET	443	49842	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.060059071 CET	443	49841	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.060595989 CET	49841	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.060625076 CET	443	49841	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.061109066 CET	49841	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.061122894 CET	443	49841	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.214008093 CET	443	49838	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.217611074 CET	443	49838	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.218797922 CET	49838	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.218849897 CET	49838	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.218868971 CET	443	49838	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.218880892 CET	49838	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.218888044 CET	443	49838	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.221534014 CET	49844	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.221569061 CET	443	49844	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.221649885 CET	49844	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.221788883 CET	49844	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.221796989 CET	443	49844	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.258053064 CET	443	49839	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.261184931 CET	443	49839	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.261244059 CET	443	49839	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.261310101 CET	49839	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.261591911 CET	49839	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.261604071 CET	443	49839	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.261612892 CET	49839	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.261617899 CET	443	49839	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.267052889 CET	49845	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.267090082 CET	443	49845	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.267159939 CET	49845	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.267666101 CET	49845	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.267679930 CET	443	49845	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.361852884 CET	443	49840	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.365026951 CET	443	49840	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.365122080 CET	49840	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.365122080 CET	49840	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.365164042 CET	49840	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.365179062 CET	443	49840	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.367566109 CET	49846	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.367593050 CET	443	49846	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.367662907 CET	49846	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.367830038 CET	49846	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.367837906 CET	443	49846	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.445693970 CET	443	49842	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.449403048 CET	443	49842	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.450587988 CET	49842	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.451108932 CET	49842	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.451108932 CET	49842	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.451128960 CET	443	49842	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.451138020 CET	443	49842	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.459187031 CET	49847	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.459243059 CET	443	49847	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.460064888 CET	49847	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.460920095 CET	49847	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.460932970 CET	443	49847	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.506565094 CET	443	49841	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.509876966 CET	443	49841	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.509931087 CET	49841	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.510055065 CET	49841	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.510067940 CET	443	49841	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.510082006 CET	49841	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.510088921 CET	443	49841	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.514870882 CET	49848	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.514911890 CET	443	49848	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.514971018 CET	49848	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.515117884 CET	49848	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:35.515130997 CET	443	49848	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:35.644541979 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:35.644659996 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:35.647486925 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:35.647491932 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:35.647722960 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:35.654006958 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:35.699320078 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:36.090914011 CET	49712	80	192.168.2.11	5.230.35.39
Nov 25, 2024 08:46:36.090966940 CET	49711	80	192.168.2.11	5.230.35.39
Nov 25, 2024 08:46:36.210509062 CET	80	49712	5.230.35.39	192.168.2.11
Nov 25, 2024 08:46:36.210526943 CET	80	49711	5.230.35.39	192.168.2.11
Nov 25, 2024 08:46:36.331135988 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:36.331159115 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:36.331176043 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:36.331239939 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:36.331264973 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:36.331317902 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:36.373779058 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:36.373828888 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:36.373855114 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:36.373883963 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:36.373898029 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:36.373903036 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:36.373929977 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:36.374161959 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:36.374176979 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:36.374188900 CET	49843	443	192.168.2.11	172.202.163.200
Nov 25, 2024 08:46:36.374193907 CET	443	49843	172.202.163.200	192.168.2.11
Nov 25, 2024 08:46:37.003930092 CET	443	49844	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.004601955 CET	49844	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.004621983 CET	443	49844	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.005086899 CET	49844	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.005091906 CET	443	49844	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.050492048 CET	443	49845	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.052974939 CET	49845	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.052993059 CET	443	49845	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.053411007 CET	49845	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.053416967 CET	443	49845	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.152713060 CET	443	49846	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.153284073 CET	49846	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.153299093 CET	443	49846	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.153743029 CET	49846	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.153748035 CET	443	49846	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.240245104 CET	443	49847	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.240906000 CET	49847	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.240931988 CET	443	49847	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.241363049 CET	49847	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.241368055 CET	443	49847	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.363765955 CET	443	49848	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.364475012 CET	49848	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.364507914 CET	443	49848	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.364923000 CET	49848	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.364928961 CET	443	49848	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.448652983 CET	443	49844	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.451931953 CET	443	49844	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.452003956 CET	443	49844	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.452131033 CET	49844	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.452131033 CET	49844	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.452151060 CET	49844	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.452151060 CET	49844	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.452156067 CET	443	49844	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.452163935 CET	443	49844	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.455231905 CET	49849	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.455277920 CET	443	49849	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.455380917 CET	49849	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.455562115 CET	49849	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.455574036 CET	443	49849	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.497869015 CET	443	49845	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.501348972 CET	443	49845	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.501460075 CET	49845	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.501487017 CET	49845	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.501497030 CET	443	49845	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.501507998 CET	49845	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.501513958 CET	443	49845	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.504292011 CET	49850	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.504328012 CET	443	49850	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.504395008 CET	49850	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.504533052 CET	49850	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.504540920 CET	443	49850	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.608719110 CET	443	49846	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.612128973 CET	443	49846	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.612211943 CET	49846	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.612278938 CET	49846	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.612293959 CET	443	49846	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.612306118 CET	49846	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.612314939 CET	443	49846	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.615189075 CET	49851	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.615232944 CET	443	49851	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.615307093 CET	49851	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.615462065 CET	49851	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.615468979 CET	443	49851	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.682872057 CET	443	49847	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.686711073 CET	443	49847	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.686815023 CET	49847	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.686893940 CET	49847	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.686893940 CET	49847	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.686918020 CET	443	49847	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.686932087 CET	443	49847	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.689816952 CET	49852	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.689861059 CET	443	49852	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.689959049 CET	49852	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.690150023 CET	49852	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.690164089 CET	443	49852	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.819358110 CET	443	49848	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.822483063 CET	443	49848	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.822547913 CET	443	49848	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.822563887 CET	49848	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.822603941 CET	49848	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.822675943 CET	49848	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.822694063 CET	443	49848	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.822710037 CET	49848	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.822715998 CET	443	49848	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.825911045 CET	49853	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.825953007 CET	443	49853	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:37.826049089 CET	49853	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.826256990 CET	49853	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:37.826265097 CET	443	49853	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.177407026 CET	443	49849	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.177824974 CET	49849	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.177839994 CET	443	49849	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.178395987 CET	49849	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.178400040 CET	443	49849	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.288327932 CET	443	49850	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.288820982 CET	49850	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.288846016 CET	443	49850	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.289421082 CET	49850	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.289427042 CET	443	49850	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.402396917 CET	443	49851	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.403000116 CET	49851	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.403024912 CET	443	49851	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.403458118 CET	49851	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.403462887 CET	443	49851	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.469270945 CET	443	49852	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.469881058 CET	49852	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.469907999 CET	443	49852	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.470263004 CET	49852	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.470268011 CET	443	49852	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.610143900 CET	443	49853	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.612046957 CET	443	49849	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.614408016 CET	49853	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.614444971 CET	443	49853	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.614871025 CET	49853	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.614876986 CET	443	49853	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.615267992 CET	443	49849	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.615854025 CET	49849	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.615942001 CET	49849	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.615969896 CET	443	49849	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.615981102 CET	49849	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.615988016 CET	443	49849	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.619252920 CET	49854	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.619378090 CET	443	49854	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.619472027 CET	49854	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.619604111 CET	49854	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.619642019 CET	443	49854	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.732250929 CET	443	49850	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.736346960 CET	443	49850	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.736397028 CET	443	49850	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.736438990 CET	49850	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.736474991 CET	49850	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.736545086 CET	49850	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.736567020 CET	443	49850	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.736577988 CET	49850	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.736582994 CET	443	49850	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.739363909 CET	49856	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.739406109 CET	443	49856	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.739480972 CET	49856	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.739677906 CET	49856	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.739695072 CET	443	49856	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.849487066 CET	443	49851	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.852675915 CET	443	49851	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.852782011 CET	49851	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.852832079 CET	49851	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.852832079 CET	49851	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.852854013 CET	443	49851	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.852863073 CET	443	49851	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.855926991 CET	49857	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.855972052 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.856046915 CET	49857	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.856225014 CET	49857	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.856240034 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.911801100 CET	443	49852	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.915436983 CET	443	49852	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.915488005 CET	49852	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.915491104 CET	443	49852	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.915537119 CET	49852	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.915627003 CET	49852	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.915636063 CET	443	49852	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.915646076 CET	49852	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.915651083 CET	443	49852	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.918601990 CET	49858	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.918632984 CET	443	49858	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:39.918694973 CET	49858	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.919111013 CET	49858	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:39.919121981 CET	443	49858	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:40.051132917 CET	443	49853	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:40.054713964 CET	443	49853	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:40.054819107 CET	49853	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:40.054868937 CET	49853	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:40.054868937 CET	49853	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:40.054888010 CET	443	49853	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:40.054898024 CET	443	49853	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:40.058549881 CET	49859	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:40.058604956 CET	443	49859	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:40.058686018 CET	49859	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:40.058904886 CET	49859	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:40.058921099 CET	443	49859	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.464183092 CET	443	49854	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.464979887 CET	49854	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.464989901 CET	443	49854	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.465482950 CET	49854	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.465490103 CET	443	49854	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.515852928 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.516011953 CET	443	49856	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.516434908 CET	49857	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.516459942 CET	49856	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.516467094 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.516477108 CET	443	49856	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.516952038 CET	49856	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.516957998 CET	443	49856	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.517035961 CET	49857	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.517041922 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.816562891 CET	443	49859	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.817261934 CET	49859	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.817287922 CET	443	49859	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.817708969 CET	49859	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.817714930 CET	443	49859	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.853570938 CET	443	49858	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.854223013 CET	49858	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.854239941 CET	443	49858	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.854700089 CET	49858	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.854703903 CET	443	49858	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.916512012 CET	443	49854	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.919907093 CET	443	49854	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.919991016 CET	443	49854	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.919996023 CET	49854	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.920046091 CET	49854	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.921298027 CET	49854	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.921315908 CET	443	49854	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.921325922 CET	49854	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.921331882 CET	443	49854	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.924305916 CET	49860	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.924349070 CET	443	49860	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.924453020 CET	49860	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.924612045 CET	49860	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.924618959 CET	443	49860	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.958686113 CET	443	49856	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.960639000 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.961831093 CET	443	49856	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.961882114 CET	49856	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.961920977 CET	49856	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.961941957 CET	443	49856	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.961952925 CET	49856	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.961961031 CET	443	49856	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.963776112 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.963825941 CET	49857	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.963835955 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.963852882 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.963905096 CET	49857	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.963918924 CET	49857	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.963927031 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.963934898 CET	49857	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.963938951 CET	443	49857	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.966816902 CET	49861	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.966860056 CET	443	49861	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.966922045 CET	49861	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.967233896 CET	49861	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.967246056 CET	443	49861	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.968832016 CET	49862	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.968868971 CET	443	49862	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:41.968930960 CET	49862	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.969095945 CET	49862	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:41.969113111 CET	443	49862	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.252959967 CET	443	49859	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.256450891 CET	443	49859	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.256520987 CET	49859	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.256602049 CET	49859	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.256623030 CET	443	49859	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.256634951 CET	49859	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.256639957 CET	443	49859	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.260277987 CET	49863	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.260322094 CET	443	49863	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.260396004 CET	49863	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.260601044 CET	49863	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.260612011 CET	443	49863	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.305433035 CET	443	49858	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.308830023 CET	443	49858	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.308886051 CET	49858	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.309835911 CET	49858	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.309858084 CET	443	49858	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.309873104 CET	49858	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.309879065 CET	443	49858	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.313411951 CET	49864	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.313447952 CET	443	49864	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:42.313503027 CET	49864	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.313661098 CET	49864	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:42.313669920 CET	443	49864	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:43.704161882 CET	443	49860	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:43.704838037 CET	49860	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:43.704866886 CET	443	49860	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:43.705313921 CET	49860	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:43.705321074 CET	443	49860	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:43.746056080 CET	443	49861	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:43.746696949 CET	49861	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:43.746711969 CET	443	49861	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:43.747189045 CET	49861	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:43.747194052 CET	443	49861	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:43.819655895 CET	443	49862	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:43.820344925 CET	49862	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:43.820377111 CET	443	49862	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:43.820817947 CET	49862	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:43.820823908 CET	443	49862	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.091713905 CET	443	49864	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.092217922 CET	49864	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.092253923 CET	443	49864	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.092885017 CET	49864	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.092891932 CET	443	49864	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.105232000 CET	443	49863	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.105845928 CET	49863	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.105854034 CET	443	49863	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.106332064 CET	49863	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.106334925 CET	443	49863	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.147425890 CET	443	49860	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.150516033 CET	443	49860	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.150608063 CET	49860	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.150684118 CET	49860	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.150703907 CET	443	49860	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.150719881 CET	49860	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.150726080 CET	443	49860	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.153845072 CET	49865	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.153887033 CET	443	49865	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.153970957 CET	49865	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.154237986 CET	49865	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.154252052 CET	443	49865	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.190057993 CET	443	49861	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.192981958 CET	443	49861	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.193028927 CET	443	49861	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.193059921 CET	49861	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.193105936 CET	49861	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.193164110 CET	49861	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.193181992 CET	443	49861	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.193200111 CET	49861	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.193206072 CET	443	49861	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.196063042 CET	49866	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.196101904 CET	443	49866	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.196175098 CET	49866	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.196330070 CET	49866	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.196345091 CET	443	49866	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.246900082 CET	49867	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:46:44.246934891 CET	443	49867	142.250.181.68	192.168.2.11
Nov 25, 2024 08:46:44.247073889 CET	49867	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:46:44.247303009 CET	49867	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:46:44.247311115 CET	443	49867	142.250.181.68	192.168.2.11
Nov 25, 2024 08:46:44.272927999 CET	443	49862	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.275854111 CET	443	49862	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.275957108 CET	49862	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.276000977 CET	49862	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.276000977 CET	49862	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.276026011 CET	443	49862	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.276038885 CET	443	49862	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.279319048 CET	49868	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.279361010 CET	443	49868	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.279443979 CET	49868	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.279660940 CET	49868	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.279670954 CET	443	49868	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.541388035 CET	443	49864	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.544538975 CET	443	49864	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.544636011 CET	49864	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.544691086 CET	49864	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.544712067 CET	443	49864	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.544724941 CET	49864	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.544730902 CET	443	49864	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.547588110 CET	49869	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.547622919 CET	443	49869	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.547751904 CET	49869	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.547921896 CET	49869	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.547930956 CET	443	49869	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.557658911 CET	443	49863	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.560800076 CET	443	49863	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.560868025 CET	443	49863	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.560888052 CET	49863	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.560940027 CET	49863	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.560998917 CET	49863	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.561016083 CET	443	49863	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.561028004 CET	49863	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.561033010 CET	443	49863	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.563730955 CET	49870	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.563788891 CET	443	49870	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:44.563854933 CET	49870	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.563999891 CET	49870	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:44.564014912 CET	443	49870	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:45.911350012 CET	443	49866	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:45.912067890 CET	49866	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:45.912095070 CET	443	49866	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:45.912586927 CET	49866	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:45.912596941 CET	443	49866	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:45.931761980 CET	443	49865	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:45.932329893 CET	49865	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:45.932353020 CET	443	49865	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:45.932895899 CET	49865	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:45.932900906 CET	443	49865	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:45.994015932 CET	443	49868	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:45.994919062 CET	49868	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:45.994940996 CET	443	49868	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:45.995491982 CET	49868	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:45.995497942 CET	443	49868	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.030194998 CET	443	49867	142.250.181.68	192.168.2.11
Nov 25, 2024 08:46:46.031024933 CET	49867	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:46:46.031039953 CET	443	49867	142.250.181.68	192.168.2.11
Nov 25, 2024 08:46:46.031385899 CET	443	49867	142.250.181.68	192.168.2.11
Nov 25, 2024 08:46:46.031713963 CET	49867	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:46:46.031768084 CET	443	49867	142.250.181.68	192.168.2.11
Nov 25, 2024 08:46:46.073837996 CET	49867	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:46:46.268565893 CET	443	49869	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.269174099 CET	49869	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.269184113 CET	443	49869	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.269680977 CET	49869	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.269686937 CET	443	49869	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.355585098 CET	443	49866	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.358695030 CET	443	49866	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.358778954 CET	49866	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.358814001 CET	49866	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.358829975 CET	443	49866	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.358841896 CET	49866	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.358849049 CET	443	49866	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.362267971 CET	49871	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.362303972 CET	443	49871	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.362415075 CET	49871	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.362988949 CET	49871	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.363010883 CET	443	49871	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.381006956 CET	443	49865	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.384222031 CET	443	49865	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.384315014 CET	49865	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.384372950 CET	49865	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.384387016 CET	443	49865	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.384399891 CET	49865	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.384406090 CET	443	49865	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.387245893 CET	49872	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.387280941 CET	443	49872	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.387367964 CET	49872	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.387528896 CET	49872	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.387542009 CET	443	49872	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.407229900 CET	443	49870	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.407912016 CET	49870	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.407931089 CET	443	49870	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.408262968 CET	49870	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.408267975 CET	443	49870	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.427426100 CET	443	49868	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.431045055 CET	443	49868	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.431130886 CET	443	49868	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.431196928 CET	49868	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.431296110 CET	49868	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.431296110 CET	49868	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.432218075 CET	49868	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.432240009 CET	443	49868	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.434393883 CET	49873	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.434437990 CET	443	49873	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.434542894 CET	49873	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.434684038 CET	49873	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.434694052 CET	443	49873	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.700288057 CET	443	49869	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.704088926 CET	443	49869	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.704304934 CET	49869	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.704405069 CET	49869	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.704405069 CET	49869	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.704421043 CET	443	49869	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.704427958 CET	443	49869	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.707129955 CET	49874	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.707154989 CET	443	49874	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.707225084 CET	49874	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.707377911 CET	49874	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.707387924 CET	443	49874	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.860440969 CET	443	49870	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.863614082 CET	443	49870	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.863673925 CET	443	49870	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.863691092 CET	49870	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.863739014 CET	49870	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.863821030 CET	49870	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.863842964 CET	443	49870	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.863856077 CET	49870	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.863862991 CET	443	49870	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.866745949 CET	49875	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.866758108 CET	443	49875	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:46.866827965 CET	49875	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.866982937 CET	49875	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:46.866997004 CET	443	49875	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.149249077 CET	443	49871	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.149892092 CET	49871	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.149915934 CET	443	49871	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.150353909 CET	49871	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.150363922 CET	443	49871	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.167268991 CET	443	49872	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.168483019 CET	49872	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.168500900 CET	443	49872	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.169509888 CET	49872	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.169514894 CET	443	49872	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.217521906 CET	443	49873	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.218173027 CET	49873	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.218194962 CET	443	49873	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.218647957 CET	49873	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.218656063 CET	443	49873	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.490873098 CET	443	49874	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.491811991 CET	49874	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.491823912 CET	443	49874	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.492436886 CET	49874	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.492443085 CET	443	49874	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.579482079 CET	443	49875	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.580137968 CET	49875	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.580178022 CET	443	49875	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.580595016 CET	49875	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.580600977 CET	443	49875	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.591069937 CET	443	49871	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.594383001 CET	443	49871	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.594504118 CET	49871	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.594552994 CET	49871	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.594552994 CET	49871	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.594573021 CET	443	49871	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.594582081 CET	443	49871	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.597589970 CET	49876	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.597615004 CET	443	49876	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.597735882 CET	49876	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.597937107 CET	49876	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.597948074 CET	443	49876	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.611247063 CET	443	49872	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.614352942 CET	443	49872	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.614447117 CET	49872	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.614516020 CET	49872	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.614530087 CET	443	49872	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.614541054 CET	49872	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.614545107 CET	443	49872	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.617291927 CET	49877	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.617333889 CET	443	49877	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.617400885 CET	49877	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.617522001 CET	49877	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.617535114 CET	443	49877	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.659898043 CET	443	49873	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.663731098 CET	443	49873	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.663863897 CET	49873	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.663897991 CET	49873	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.663897991 CET	49873	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.663914919 CET	443	49873	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.663923979 CET	443	49873	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.667232037 CET	49878	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.667268038 CET	443	49878	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.667406082 CET	49878	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.667602062 CET	49878	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.667613983 CET	443	49878	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.933355093 CET	443	49874	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.936804056 CET	443	49874	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.936913013 CET	49874	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.936976910 CET	49874	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.937000036 CET	443	49874	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.937012911 CET	49874	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.937019110 CET	443	49874	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.939886093 CET	49879	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.939935923 CET	443	49879	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:48.940108061 CET	49879	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.940202951 CET	49879	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:48.940217972 CET	443	49879	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:49.014709949 CET	443	49875	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:49.017882109 CET	443	49875	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:49.018002033 CET	49875	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:49.018074036 CET	49875	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:49.018105984 CET	443	49875	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:49.018122911 CET	49875	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:49.018129110 CET	443	49875	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:49.021060944 CET	49880	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:49.021138906 CET	443	49880	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:49.021315098 CET	49880	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:49.021465063 CET	49880	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:49.021503925 CET	443	49880	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.311988115 CET	443	49876	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.312762022 CET	49876	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.312771082 CET	443	49876	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.313251019 CET	49876	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.313256025 CET	443	49876	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.398804903 CET	443	49877	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.399533987 CET	49877	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.399558067 CET	443	49877	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.399915934 CET	49877	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.399924994 CET	443	49877	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.446074963 CET	443	49878	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.446839094 CET	49878	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.446855068 CET	443	49878	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.447304964 CET	49878	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.447309971 CET	443	49878	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.723042011 CET	443	49879	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.723520041 CET	49879	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.723543882 CET	443	49879	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.723947048 CET	49879	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.723957062 CET	443	49879	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.746035099 CET	443	49876	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.749262094 CET	443	49876	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.749356031 CET	49876	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.749484062 CET	49876	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.749484062 CET	49876	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.749495029 CET	443	49876	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.749502897 CET	443	49876	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.753349066 CET	49881	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.753398895 CET	443	49881	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.753479958 CET	49881	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.753736973 CET	49881	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.753748894 CET	443	49881	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.842291117 CET	443	49877	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.845411062 CET	443	49877	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.845506907 CET	49877	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.845602036 CET	49877	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.845626116 CET	443	49877	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.845649958 CET	49877	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.845655918 CET	443	49877	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.848665953 CET	49882	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.848716974 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.848788023 CET	49882	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.849009991 CET	49882	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.849025965 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.864409924 CET	443	49880	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.865026951 CET	49880	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.865067959 CET	443	49880	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.865482092 CET	49880	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.865490913 CET	443	49880	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.896496058 CET	443	49878	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.899575949 CET	443	49878	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.899635077 CET	443	49878	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.899702072 CET	49878	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.899766922 CET	49878	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.899821043 CET	49878	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.899821043 CET	49878	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.899833918 CET	443	49878	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.899843931 CET	443	49878	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.902687073 CET	49883	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.902750015 CET	443	49883	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:50.902918100 CET	49883	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.903096914 CET	49883	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:50.903115034 CET	443	49883	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.166254044 CET	443	49879	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.169329882 CET	443	49879	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.169397116 CET	49879	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.169470072 CET	49879	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.169500113 CET	443	49879	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.169518948 CET	49879	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.169524908 CET	443	49879	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.172274113 CET	49884	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.172285080 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.172349930 CET	49884	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.172530890 CET	49884	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.172543049 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.317848921 CET	443	49880	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.321069002 CET	443	49880	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.321146965 CET	49880	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.321213007 CET	49880	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.321249962 CET	443	49880	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.321259975 CET	49880	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.321269035 CET	443	49880	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.324493885 CET	49885	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.324542046 CET	443	49885	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:51.324615955 CET	49885	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.324814081 CET	49885	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:51.324836969 CET	443	49885	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.470506907 CET	443	49881	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.471338987 CET	49881	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.471350908 CET	443	49881	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.471827984 CET	49881	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.471832991 CET	443	49881	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.683904886 CET	443	49883	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.684513092 CET	49883	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.684530020 CET	443	49883	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.685013056 CET	49883	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.685019016 CET	443	49883	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.822156906 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.822767973 CET	49882	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.822793007 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.823240995 CET	49882	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.823246002 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.889239073 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.889820099 CET	49884	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.889832973 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.890304089 CET	49884	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.890309095 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.903911114 CET	443	49881	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.907424927 CET	443	49881	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.907486916 CET	49881	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.907531977 CET	49881	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.907550097 CET	443	49881	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.907561064 CET	49881	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.907567024 CET	443	49881	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.910432100 CET	49886	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.910463095 CET	443	49886	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:52.910535097 CET	49886	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.910671949 CET	49886	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:52.910681963 CET	443	49886	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.126641035 CET	443	49883	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.130192995 CET	443	49883	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.130259037 CET	443	49883	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.130264044 CET	49883	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.130275965 CET	443	49885	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.130315065 CET	49883	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.130384922 CET	49883	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.130390882 CET	443	49883	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.130400896 CET	49883	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.130405903 CET	443	49883	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.130753040 CET	49885	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.130788088 CET	443	49885	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.131262064 CET	49885	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.131273031 CET	443	49885	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.133353949 CET	49887	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.133388996 CET	443	49887	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.133469105 CET	49887	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.133641958 CET	49887	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.133646965 CET	443	49887	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.265631914 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.265657902 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.265719891 CET	49882	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.265733957 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.265990019 CET	49882	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.265995026 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.266011000 CET	49882	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.266174078 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.266210079 CET	443	49882	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.266258001 CET	49882	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.268802881 CET	49888	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.268842936 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.268919945 CET	49888	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.269074917 CET	49888	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.269088030 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.322405100 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.325033903 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.325103045 CET	49884	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.325114965 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.325154066 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.325201988 CET	49884	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.327131033 CET	49884	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.327141047 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.327152967 CET	49884	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.327158928 CET	443	49884	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.329958916 CET	49889	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.330013037 CET	443	49889	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.330095053 CET	49889	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.330279112 CET	49889	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.330295086 CET	443	49889	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.573932886 CET	443	49885	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.576971054 CET	443	49885	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.577195883 CET	49885	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.577195883 CET	49885	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.577195883 CET	49885	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.580178976 CET	49890	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.580220938 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.580358028 CET	49890	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.580533981 CET	49890	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.580547094 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:53.886102915 CET	49885	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:53.886142015 CET	443	49885	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:54.698009968 CET	443	49886	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:54.698928118 CET	49886	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:54.698949099 CET	443	49886	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:54.699342012 CET	49886	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:54.699346066 CET	443	49886	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:54.925642967 CET	443	49887	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:54.926266909 CET	49887	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:54.926290035 CET	443	49887	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:54.926692009 CET	49887	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:54.926700115 CET	443	49887	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:54.982486010 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:54.983916044 CET	49888	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:54.983938932 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:54.984498024 CET	49888	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:54.984502077 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.139940023 CET	443	49886	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.143167973 CET	443	49886	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.143213034 CET	443	49886	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.143222094 CET	49886	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.143275023 CET	49886	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.143325090 CET	49886	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.143332005 CET	443	49886	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.143345118 CET	49886	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.143349886 CET	443	49886	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.146127939 CET	49891	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.146169901 CET	443	49891	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.146234989 CET	49891	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.146373034 CET	49891	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.146385908 CET	443	49891	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.183830976 CET	443	49889	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.184453011 CET	49889	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.184465885 CET	443	49889	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.184925079 CET	49889	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.184930086 CET	443	49889	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.297749043 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.298480988 CET	49890	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.298502922 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.298985958 CET	49890	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.298990965 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.368668079 CET	443	49887	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.371864080 CET	443	49887	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.372273922 CET	49887	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.372328997 CET	49887	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.372350931 CET	443	49887	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.372365952 CET	49887	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.372373104 CET	443	49887	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.375627995 CET	49892	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.375659943 CET	443	49892	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.375758886 CET	49892	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.375989914 CET	49892	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.376003027 CET	443	49892	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.416107893 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.416127920 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.416203976 CET	49888	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.416213036 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.419996977 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.420067072 CET	49888	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.420464039 CET	49888	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.420471907 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.420492887 CET	49888	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.420496941 CET	443	49888	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.423485041 CET	49893	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.423522949 CET	443	49893	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.423613071 CET	49893	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.423744917 CET	49893	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.423760891 CET	443	49893	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.635993958 CET	443	49889	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.639472961 CET	443	49889	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.639559031 CET	49889	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.639620066 CET	443	49889	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.639626026 CET	49889	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.639640093 CET	49889	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.639666080 CET	49889	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.639672041 CET	443	49889	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.639687061 CET	443	49889	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.642446995 CET	49894	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.642468929 CET	443	49894	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.642546892 CET	49894	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.642714977 CET	49894	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.642724991 CET	443	49894	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.707377911 CET	443	49867	142.250.181.68	192.168.2.11
Nov 25, 2024 08:46:55.707525969 CET	443	49867	142.250.181.68	192.168.2.11
Nov 25, 2024 08:46:55.707586050 CET	49867	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:46:55.731755972 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.734886885 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.734957933 CET	49890	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.734975100 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.735006094 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.735055923 CET	49890	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.735093117 CET	49890	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.735105038 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.735114098 CET	49890	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.735119104 CET	443	49890	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.737829924 CET	49895	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.737845898 CET	443	49895	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:55.737917900 CET	49895	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.738040924 CET	49895	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:55.738055944 CET	443	49895	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:56.090764999 CET	49867	443	192.168.2.11	142.250.181.68
Nov 25, 2024 08:46:56.090800047 CET	443	49867	142.250.181.68	192.168.2.11
Nov 25, 2024 08:46:56.927191973 CET	443	49891	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:56.927815914 CET	49891	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:56.927840948 CET	443	49891	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:56.928309917 CET	49891	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:56.928314924 CET	443	49891	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.090413094 CET	443	49892	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.091025114 CET	49892	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.091044903 CET	443	49892	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.091516018 CET	49892	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.091521978 CET	443	49892	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.201227903 CET	443	49893	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.201781988 CET	49893	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.201795101 CET	443	49893	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.202265978 CET	49893	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.202281952 CET	443	49893	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.370312929 CET	443	49891	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.373357058 CET	443	49891	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.373414040 CET	49891	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.373464108 CET	49891	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.373486042 CET	443	49891	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.373502016 CET	49891	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.373507977 CET	443	49891	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.377603054 CET	49896	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.377657890 CET	443	49896	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.377720118 CET	49896	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.377866030 CET	49896	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.377875090 CET	443	49896	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.437342882 CET	443	49894	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.437870979 CET	49894	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.437880993 CET	443	49894	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.438389063 CET	49894	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.438395023 CET	443	49894	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.524302006 CET	443	49892	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.525943041 CET	443	49895	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.526417971 CET	49895	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.526429892 CET	443	49895	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.526856899 CET	49895	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.526865959 CET	443	49895	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.527499914 CET	443	49892	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.527600050 CET	49892	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.527673006 CET	49892	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.527682066 CET	443	49892	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.527740955 CET	49892	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.527748108 CET	443	49892	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.530970097 CET	49897	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.531016111 CET	443	49897	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.531081915 CET	49897	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.531234980 CET	49897	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.531249046 CET	443	49897	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.643975019 CET	443	49893	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.647264004 CET	443	49893	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.647336960 CET	49893	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.647372961 CET	49893	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.647397041 CET	443	49893	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.647409916 CET	49893	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.647416115 CET	443	49893	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.651160955 CET	49898	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.651287079 CET	443	49898	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.651405096 CET	49898	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.651628017 CET	49898	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.651664972 CET	443	49898	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.882682085 CET	443	49894	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.885832071 CET	443	49894	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.885885954 CET	49894	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.885890007 CET	443	49894	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.885940075 CET	49894	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.903531075 CET	49894	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.903556108 CET	443	49894	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.903568983 CET	49894	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.903573990 CET	443	49894	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.906352043 CET	49899	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.906390905 CET	443	49899	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.906455040 CET	49899	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.914665937 CET	49899	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.914685011 CET	443	49899	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.975498915 CET	443	49895	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.978497982 CET	443	49895	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.978570938 CET	49895	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.978717089 CET	49895	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.978737116 CET	443	49895	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.978749990 CET	49895	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.978755951 CET	443	49895	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.981631994 CET	49900	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.981658936 CET	443	49900	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:57.981730938 CET	49900	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.981872082 CET	49900	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:57.981882095 CET	443	49900	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.164767027 CET	443	49896	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.165277958 CET	49896	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.165311098 CET	443	49896	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.165935993 CET	49896	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.165941000 CET	443	49896	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.316452980 CET	443	49897	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.316895008 CET	49897	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.316910982 CET	443	49897	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.317372084 CET	49897	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.317375898 CET	443	49897	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.369190931 CET	443	49898	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.369694948 CET	49898	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.369730949 CET	443	49898	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.370194912 CET	49898	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.370202065 CET	443	49898	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.606384993 CET	443	49896	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.610085011 CET	443	49896	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.610135078 CET	49896	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.610146999 CET	443	49896	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.610198021 CET	49896	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.610223055 CET	49896	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.610244036 CET	443	49896	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.610259056 CET	49896	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.610264063 CET	443	49896	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.613060951 CET	49901	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.613111973 CET	443	49901	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.613192081 CET	49901	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.613364935 CET	49901	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.613375902 CET	443	49901	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.694775105 CET	443	49899	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.695290089 CET	49899	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.695326090 CET	443	49899	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.695748091 CET	49899	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.695754051 CET	443	49899	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.761053085 CET	443	49897	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.764125109 CET	443	49897	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.764241934 CET	49897	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.764312029 CET	49897	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.764336109 CET	443	49897	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.764360905 CET	49897	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.764369011 CET	443	49897	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.765464067 CET	443	49900	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.765832901 CET	49900	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.765856981 CET	443	49900	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.766256094 CET	49900	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.766263962 CET	443	49900	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.767254114 CET	49902	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.767290115 CET	443	49902	13.107.246.63	192.168.2.11
Nov 25, 2024 08:46:59.767348051 CET	49902	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.767472029 CET	49902	443	192.168.2.11	13.107.246.63
Nov 25, 2024 08:46:59.767482996 CET	443	49902	13.107.246.63	192.168.2.11

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 08:45:40.046262980 CET	53	53143	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:40.087992907 CET	53	51180	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:41.659548044 CET	55820	53	192.168.2.11	1.1.1.1
Nov 25, 2024 08:45:41.659883976 CET	55665	53	192.168.2.11	1.1.1.1
Nov 25, 2024 08:45:41.672065020 CET	60013	53	192.168.2.11	1.1.1.1
Nov 25, 2024 08:45:41.672226906 CET	55249	53	192.168.2.11	1.1.1.1
Nov 25, 2024 08:45:42.010126114 CET	53	55820	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:42.010248899 CET	53	55249	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:42.010270119 CET	53	55665	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:42.010860920 CET	53	60013	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:42.863909006 CET	53	61797	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:44.184870005 CET	52661	53	192.168.2.11	1.1.1.1
Nov 25, 2024 08:45:44.185282946 CET	61459	53	192.168.2.11	1.1.1.1
Nov 25, 2024 08:45:44.321902990 CET	53	52661	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:44.322071075 CET	53	61459	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:46.467653990 CET	54910	53	192.168.2.11	1.1.1.1
Nov 25, 2024 08:45:46.467921019 CET	55169	53	192.168.2.11	1.1.1.1
Nov 25, 2024 08:45:46.683697939 CET	53	54910	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:46.683712959 CET	53	55169	1.1.1.1	192.168.2.11
Nov 25, 2024 08:45:59.851910114 CET	53	57538	1.1.1.1	192.168.2.11
Nov 25, 2024 08:46:18.602955103 CET	53	52499	1.1.1.1	192.168.2.11
Nov 25, 2024 08:46:31.642751932 CET	138	138	192.168.2.11	192.168.2.255
Nov 25, 2024 08:46:39.668502092 CET	53	65447	1.1.1.1	192.168.2.11
Nov 25, 2024 08:46:41.306824923 CET	53	64997	1.1.1.1	192.168.2.11

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 25, 2024 08:45:40.206302881 CET	192.168.2.11	1.1.1.1	c23a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 08:45:41.659548044 CET	192.168.2.11	1.1.1.1	0xd9cc	Standard query (0)	henselsreadymix.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 08:45:41.659883976 CET	192.168.2.11	1.1.1.1	0xc7f4	Standard query (0)	henselsreadymix.com	65	IN (0x0001)	false
Nov 25, 2024 08:45:41.672065020 CET	192.168.2.11	1.1.1.1	0xfae8	Standard query (0)	henselsreadymix.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 08:45:41.672226906 CET	192.168.2.11	1.1.1.1	0x195a	Standard query (0)	henselsreadymix.com	65	IN (0x0001)	false
Nov 25, 2024 08:45:44.184870005 CET	192.168.2.11	1.1.1.1	0xd337	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 08:45:44.185282946 CET	192.168.2.11	1.1.1.1	0x5c7b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 08:45:46.467653990 CET	192.168.2.11	1.1.1.1	0x31e3	Standard query (0)	henselsreadymix.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 08:45:46.467921019 CET	192.168.2.11	1.1.1.1	0xb451	Standard query (0)	henselsreadymix.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 08:45:42.010126114 CET	1.1.1.1	192.168.2.11	0xd9cc	No error (0)	henselsreadymix.com	5.230.35.39	A (IP address)	IN (0x0001)	false
Nov 25, 2024 08:45:42.010860920 CET	1.1.1.1	192.168.2.11	0xfae8	No error (0)	henselsreadymix.com	5.230.35.39	A (IP address)	IN (0x0001)	false
Nov 25, 2024 08:45:44.321902990 CET	1.1.1.1	192.168.2.11	0xd337	No error (0)	www.google.com	142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 08:45:44.322071075 CET	1.1.1.1	192.168.2.11	0x5c7b	No error (0)	www.google.com		65	IN (0x0001)	false
Nov 25, 2024 08:45:46.683697939 CET	1.1.1.1	192.168.2.11	0x31e3	No error (0)	henselsreadymix.com	5.230.35.39	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

henselsreadymix.com

https:

fs.microsoft.com

slscr.update.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49712	5.230.35.39	80	3064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 08:46:27.136384964 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49711	5.230.35.39	80	3064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 08:46:27.136384964 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.11	49708	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:41 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:42 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:42 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: 19b35b80-c01e-0049-150a-3eac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074542Z-174c587ffdfb485jhC1TEBmc1s00000005g0000000006sxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:42 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 07:45:42 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-25 07:45:42 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-25 07:45:42 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-25 07:45:42 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-25 07:45:42 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-25 07:45:42 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-25 07:45:43 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-25 07:45:43 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-25 07:45:43 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49713	5.230.35.39	443	3064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:43 UTC	662	OUT	GET / HTTP/1.1 Host: henselsreadymix.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 07:45:44 UTC	202	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:44 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Content-Length: 481 Connection: close Content-Type: text/html;charset=ISO-8859-1
2024-11-25 07:45:44 UTC	481	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 33 2e 32 20 46 69 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 49 6e 64 65 78 20 6f 66 20 2f 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 64 65 78 20 6f 66 20 2f 3c 2f 68 31 3e 0a 20 20 3c 74 61 62 6c 65 3e 0a 20 20 20 3c 74 72 3e 3c 74 68 20 76 61 6c 69 67 6e 3d 22 74 6f 70 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 69 63 6f 6e 73 2f 62 6c 61 6e 6b 2e 67 69 66 22 20 61 6c 74 3d 22 5b 49 43 4f 5d 22 3e 3c 2f 74 68 3e 3c 74 68 3e 3c 61 20 68 72 65 66 3d 22 3f 43 3d 4e 3b 4f 3d 44 22 3e 4e 61 6d 65 3c 2f 61 3e 3c 2f 74 68 3e 3c 74 68 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><html> <head> <title>Index of /</title> </head> <body><h1>Index of /</h1> <table> <tr><th valign="top"><img src="/icons/blank.gif" alt="[ICO]"></th><th><a href="?C=N;O=D">Name</a></th><th>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.11	49716	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:44 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:45 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5299024a-c01e-0079-4d47-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074545Z-174c587ffdfl22mzhC1TEBk40c00000005tg000000008s5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:45 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.11	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:44 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:45 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074545Z-174c587ffdftv9hphC1TEBm29w00000005fg00000000h3ux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:45 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.11	49718	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:44 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:45 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 7268c357-001e-0066-5863-3b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074545Z-178bfbc474bbcwv4hC1NYCypys00000007100000000059cq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:45 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.11	49717	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:45 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:45 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d279acb6-501e-0029-6110-3dd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074545Z-178bfbc474bw8bwphC1NYC38b4000000071g000000003mew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:45 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.11	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:45 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:45 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2eed8dc4-701e-0098-0dc6-3e395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074545Z-178bfbc474b9fdhphC1NYCac0n000000072g000000006wm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:45 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.11	49722	5.230.35.39	443	3064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:45 UTC	598	OUT	GET /icons/blank.gif HTTP/1.1 Host: henselsreadymix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://henselsreadymix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 07:45:46 UTC	277	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:46 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Sat, 20 Nov 2004 20:16:24 GMT ETag: "94-3e9564c23b600" Accept-Ranges: bytes Content-Length: 148 Connection: close Content-Type: image/gif
2024-11-25 07:45:46 UTC	148	IN	Data Raw: 47 49 46 38 39 61 14 00 16 00 a1 00 00 ff ff ff cc ff ff 00 00 00 00 00 00 21 fe 4e 54 68 69 73 20 61 72 74 20 69 73 20 69 6e 20 74 68 65 20 70 75 62 6c 69 63 20 64 6f 6d 61 69 6e 2e 20 4b 65 76 69 6e 20 48 75 67 68 65 73 2c 20 6b 65 76 69 6e 68 40 65 69 74 2e 63 6f 6d 2c 20 53 65 70 74 65 6d 62 65 72 20 31 39 39 35 00 21 f9 04 01 00 00 01 00 2c 00 00 00 00 14 00 16 00 00 02 13 8c 8f a9 cb ed 0f a3 9c b4 da 8b b3 de bc fb 0f 86 49 01 00 3b Data Ascii: GIF89a!NThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!,I;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.11	49723	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 07:45:46 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=92865 Date: Mon, 25 Nov 2024 07:45:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.11	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:47 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:47 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 657d02d2-201e-0033-2f57-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074547Z-178bfbc474bmqmgjhC1NYCy16c00000007a0000000002cqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:47 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.11	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:47 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:47 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 30601852-401e-0047-7476-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074547Z-174c587ffdf8fcgwhC1TEBnn7000000005tg000000009m5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:47 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.11	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:47 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:47 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: ce5ebd39-a01e-0053-183c-3c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074547Z-15b8b599d882l6clhC1TEBxd5c00000005g000000000b115 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:45:47 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.11	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:47 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:47 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: dbeb181e-a01e-0050-28df-3ddb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074547Z-15b8b599d88tr2flhC1TEB5gk400000005t00000000076qy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:47 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.11	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:47 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:47 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ae573645-101e-008d-516d-3b92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074547Z-174c587ffdfx984chC1TEB676g00000005hg00000000gg0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:47 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.11	49729	5.230.35.39	443	3064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:47 UTC	594	OUT	GET /favicon.ico HTTP/1.1 Host: henselsreadymix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://henselsreadymix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 07:45:48 UTC	210	IN	HTTP/1.1 404 Not Found Date: Mon, 25 Nov 2024 07:45:48 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Content-Length: 209 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-11-25 07:45:48 UTC	209	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /favicon.ico was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.11	49730	5.230.35.39	443	3064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:48 UTC	358	OUT	GET /icons/blank.gif HTTP/1.1 Host: henselsreadymix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 07:45:48 UTC	277	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:48 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Sat, 20 Nov 2004 20:16:24 GMT ETag: "94-3e9564c23b600" Accept-Ranges: bytes Content-Length: 148 Connection: close Content-Type: image/gif
2024-11-25 07:45:48 UTC	148	IN	Data Raw: 47 49 46 38 39 61 14 00 16 00 a1 00 00 ff ff ff cc ff ff 00 00 00 00 00 00 21 fe 4e 54 68 69 73 20 61 72 74 20 69 73 20 69 6e 20 74 68 65 20 70 75 62 6c 69 63 20 64 6f 6d 61 69 6e 2e 20 4b 65 76 69 6e 20 48 75 67 68 65 73 2c 20 6b 65 76 69 6e 68 40 65 69 74 2e 63 6f 6d 2c 20 53 65 70 74 65 6d 62 65 72 20 31 39 39 35 00 21 f9 04 01 00 00 01 00 2c 00 00 00 00 14 00 16 00 00 02 13 8c 8f a9 cb ed 0f a3 9c b4 da 8b b3 de bc fb 0f 86 49 01 00 3b Data Ascii: GIF89a!NThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!,I;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.11	49731	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 07:45:49 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=92841 Date: Mon, 25 Nov 2024 07:45:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 07:45:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.11	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:49 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:49 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 239436ba-d01e-0028-7bd5-3b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074549Z-15b8b599d882l6clhC1TEBxd5c00000005h0000000008tvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:49 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.11	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:49 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:49 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: aff2abcc-f01e-0003-4547-3c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074549Z-178bfbc474brk967hC1NYCfu60000000072000000000168p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:49 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.11	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:49 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:49 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 922c5f4e-601e-005c-577c-3bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074549Z-174c587ffdfb485jhC1TEBmc1s00000005h0000000003t6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:49 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.11	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:49 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:49 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074549Z-174c587ffdfks6tlhC1TEBeza400000005ng00000000f2nx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:49 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.11	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:49 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:49 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30a29eaf-701e-001e-220f-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074549Z-178bfbc474bbcwv4hC1NYCypys00000006zg000000007xsx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:50 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.11	49737	5.230.35.39	443	3064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:50 UTC	716	OUT	GET /?C=M;O=A HTTP/1.1 Host: henselsreadymix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://henselsreadymix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 07:45:50 UTC	202	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:50 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Content-Length: 481 Connection: close Content-Type: text/html;charset=ISO-8859-1
2024-11-25 07:45:50 UTC	481	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 33 2e 32 20 46 69 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 49 6e 64 65 78 20 6f 66 20 2f 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 64 65 78 20 6f 66 20 2f 3c 2f 68 31 3e 0a 20 20 3c 74 61 62 6c 65 3e 0a 20 20 20 3c 74 72 3e 3c 74 68 20 76 61 6c 69 67 6e 3d 22 74 6f 70 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 69 63 6f 6e 73 2f 62 6c 61 6e 6b 2e 67 69 66 22 20 61 6c 74 3d 22 5b 49 43 4f 5d 22 3e 3c 2f 74 68 3e 3c 74 68 3e 3c 61 20 68 72 65 66 3d 22 3f 43 3d 4e 3b 4f 3d 41 22 3e 4e 61 6d 65 3c 2f 61 3e 3c 2f 74 68 3e 3c 74 68 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><html> <head> <title>Index of /</title> </head> <body><h1>Index of /</h1> <table> <tr><th valign="top"><img src="/icons/blank.gif" alt="[ICO]"></th><th><a href="?C=N;O=A">Name</a></th><th>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.11	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:51 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:51 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074551Z-174c587ffdf7t49mhC1TEB4qbg00000005f000000000h4v6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:52 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.11	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:51 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 21648528-e01e-003c-794e-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074551Z-178bfbc474bh5zbqhC1NYCkdug00000006zg00000000dgnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.11	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:51 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:52 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074552Z-174c587ffdf6b487hC1TEBydsn00000005eg00000000nyy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:52 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.11	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:51 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:52 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 9ffa30f7-401e-000a-3a5c-3d4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074552Z-174c587ffdfb485jhC1TEBmc1s00000005d000000000eeun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:52 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.11	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:51 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:52 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 44e9982d-301e-001f-6639-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074552Z-15b8b599d88tr2flhC1TEB5gk400000005v0000000002dem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:52 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.11	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:53 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c77577e7-501e-0078-0da6-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074554Z-15b8b599d88l2dpthC1TEBmzr000000005n0000000006p8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.11	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:53 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 0d14cf85-a01e-0032-2ee6-3e1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074554Z-15b8b599d88tr2flhC1TEB5gk400000005ng00000000h2ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.11	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:54 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: fe481865-f01e-0085-1c04-3f88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074554Z-15b8b599d88hd9g7hC1TEBp75c00000005p0000000004pft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.11	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:54 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:54 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f19b5380-801e-0015-2749-3cf97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074554Z-15b8b599d88l2dpthC1TEBmzr000000005fg00000000hasc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:54 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.11	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:54 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:54 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 57389be4-e01e-0003-606c-3c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074554Z-174c587ffdfdwxdvhC1TEB1c4n00000005pg0000000009b1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:54 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.11	49745	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:55 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Sy2V4z5bLD9G2Cd&MD=AAYRwpdO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 07:45:56 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1dd393a9-22c5-4627-aeb3-21437cbe5c5e MS-RequestId: b29832b0-752b-4de8-9857-5f2210e7ff10 MS-CV: KIJLvUeXFECaEcup.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 07:45:55 GMT Connection: close Content-Length: 24490
2024-11-25 07:45:56 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 07:45:56 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.11	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:56 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:56 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074556Z-174c587ffdf6b487hC1TEBydsn00000005n00000000047az x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:56 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.11	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:56 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 87817176-601e-003e-034d-3c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074556Z-15b8b599d88hr8sfhC1TEBbca400000005g0000000009y4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.11	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:56 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:56 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 81bf26fc-f01e-0099-6bb6-3e9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074556Z-178bfbc474bbcwv4hC1NYCypys00000006xg00000000bnkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:56 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.11	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:56 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: e1811c2a-201e-00aa-06c6-3e3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074556Z-178bfbc474bmqmgjhC1NYCy16c000000074g00000000btxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.11	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:56 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9053a11e-c01e-0046-640f-3d2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074556Z-178bfbc474bbbqrhhC1NYCvw74000000076000000000gg6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.11	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:58 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:59 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 09788b64-001e-0046-6eb7-3eda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074559Z-178bfbc474bv7whqhC1NYC1fg4000000073g000000009gze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.11	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:58 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: a7e2d1bd-a01e-0032-531b-3d1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074559Z-178bfbc474bbcwv4hC1NYCypys000000072g0000000036pw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.11	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:58 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:59 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: df8835e2-601e-0002-5b4e-3ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074559Z-15b8b599d889gj5whC1TEBfyk000000005f0000000008450 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:59 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.11	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:58 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:59 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5532245b-c01e-00ad-0e6f-3da2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074559Z-174c587ffdftjz9shC1TEBsh9800000005cg00000000mxz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:59 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.11	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:45:58 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:45:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:45:59 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 043e45ca-501e-0078-1031-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074559Z-178bfbc474bpnd5vhC1NYC4vr40000000740000000008cnb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:45:59 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.11	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:00 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:01 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: c2388785-401e-0048-0e03-3e0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074601Z-178bfbc474bgvl54hC1NYCsfuw0000000780000000000t5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:01 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.11	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:00 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: a7985a29-001e-0046-374c-3cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074601Z-15b8b599d88qw29phC1TEB5zag00000005mg0000000095sq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.11	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:00 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:01 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074601Z-178bfbc474bgvl54hC1NYCsfuw000000076g00000000313f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:01 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.11	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:01 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:01 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: b7a4c0f2-401e-0064-554c-3c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074601Z-15b8b599d88qw29phC1TEB5zag00000005gg00000000gwht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:01 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.11	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:01 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:01 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: e42c2868-f01e-003f-5826-3dd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074601Z-15b8b599d88l2dpthC1TEBmzr000000005p0000000005611 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:01 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.11	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:03 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:03 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: ea4907c4-101e-0079-4064-3d5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074603Z-174c587ffdf4zw2thC1TEBu34000000005rg000000007qtz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:03 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.11	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:03 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:03 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 8b9ec706-101e-000b-544c-3c5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074603Z-15b8b599d88f9wfchC1TEBm2kc00000005t0000000007a72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:03 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.11	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:03 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:03 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 8a9c0054-c01e-0046-231b-3e2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074603Z-178bfbc474bp8mkvhC1NYCzqnn000000070g000000005ruv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:03 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.11	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:03 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:03 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:03 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9b8b0684-e01e-001f-1ef5-3e1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074603Z-15b8b599d882hxlwhC1TEBfa5w00000005p00000000005z3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:03 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.11	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:03 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:03 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: ecf1de78-401e-0047-5d4b-3c8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074603Z-15b8b599d88f9wfchC1TEBm2kc00000005sg000000008ebk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:04 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.11	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:05 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 79b51860-701e-0021-623a-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074605Z-174c587ffdfb5q56hC1TEB04kg00000005m0000000007bby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.11	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:05 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 15dd4eb7-201e-0051-500a-3d7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074605Z-178bfbc474bvjk8shC1NYC83ns000000071g0000000043ph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.11	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:05 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 3074f9d5-701e-001e-47fc-3df5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074605Z-178bfbc474bpnd5vhC1NYC4vr4000000078g00000000108g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.11	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:05 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4ec76ea5-a01e-006f-014e-3c13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074605Z-178bfbc474btrnf9hC1NYCb80g00000007c000000000387a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.11	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:05 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 40c83c0a-001e-00ad-1e79-3b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074606Z-174c587ffdfmrvb9hC1TEBtn3800000005mg00000000d1c6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.11	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:07 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:08 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: ba3424f4-801e-0047-3bbf-3e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074607Z-178bfbc474bwlrhlhC1NYCy3kg0000000770000000003bsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.11	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:07 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:08 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 891407d0-301e-0096-28a6-3ee71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074607Z-178bfbc474btrnf9hC1NYCb80g00000007dg000000000kb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.11	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:07 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 2315140c-801e-0015-4daf-3ef97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074608Z-178bfbc474bxkclvhC1NYC69g400000007700000000008un x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.11	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:07 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:08 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 482df903-301e-005d-4bb5-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074608Z-178bfbc474b9fdhphC1NYCac0n000000071g000000008gna x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.11	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:08 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 753d71cc-101e-0065-41b6-3e4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074608Z-178bfbc474b7cbwqhC1NYC8z4n000000070000000000a8fu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.11	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:09 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:09 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074609Z-178bfbc474brk967hC1NYCfu6000000006zg000000004h82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:10 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.11	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:09 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:10 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:10 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 4072f04d-701e-0032-60d0-3ea540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074610Z-15b8b599d886w4hzhC1TEBb4ug00000005pg000000009vhg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:10 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.11	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:09 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:10 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 43d09947-101e-005a-2421-3c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074610Z-178bfbc474bwh9gmhC1NYCy3rs000000074g00000000ct12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:10 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.11	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:10 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ea7a0cbc-701e-001e-589c-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074610Z-178bfbc474bxkclvhC1NYC69g40000000760000000001npw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.11	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:10 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:10 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: cff1b669-a01e-000d-0e43-3ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074610Z-15b8b599d88vp97chC1TEB5pzw00000005hg00000000d692 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:10 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.11	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:12 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: f224b857-001e-00ad-6c03-3e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074612Z-178bfbc474bfw4gbhC1NYCunf4000000075g000000006n21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.11	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:12 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:12 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: a6c16221-901e-002a-0257-3c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074612Z-15b8b599d88l2dpthC1TEBmzr000000005m0000000009b3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:12 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.11	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:12 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: c9d02f83-e01e-0033-4d75-3b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074612Z-174c587ffdfb5q56hC1TEB04kg00000005kg00000000851x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.11	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:12 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:12 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: a28eb00b-801e-0035-04bf-3e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074612Z-178bfbc474bvjk8shC1NYC83ns0000000730000000001dbv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:12 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.11	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:12 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:13 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 07e1bf82-901e-0029-4cbf-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074613Z-178bfbc474brk967hC1NYCfu6000000006v000000000cu41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:13 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.11	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:14 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: e2ff131b-f01e-0085-7676-3b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074614Z-174c587ffdf4zw2thC1TEBu34000000005u0000000000zux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.11	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:14 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:14 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 5c8e7bca-d01e-0049-4f4b-3ce7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074614Z-15b8b599d88cn5thhC1TEBqxkn00000005ng0000000008mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:15 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.11	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:14 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: f5c58262-401e-00ac-04df-3d0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074614Z-178bfbc474btrnf9hC1NYCb80g00000007bg0000000045wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.11	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:14 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:14 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: b3049c5e-001e-0082-330c-3d5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074614Z-178bfbc474btvfdfhC1NYCa2en000000074000000000dqxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:15 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.11	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:14 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:15 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: ee6bf500-501e-000a-4e3b-3e0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074615Z-174c587ffdf4zw2thC1TEBu34000000005pg00000000dbpw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:15 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.11	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:16 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 4e89b2fa-a01e-006f-563a-3c13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074616Z-15b8b599d88hd9g7hC1TEBp75c00000005p0000000004qk9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.11	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:16 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 00c17fdd-701e-000d-2f70-3c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074617Z-174c587ffdfmlsmvhC1TEBvyks00000005pg00000000m901 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.11	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:17 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 07e1e155-901e-0029-69bf-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074617Z-178bfbc474bw8bwphC1NYC38b4000000070g000000005azw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.11	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:17 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:17 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: ce292e58-401e-00a3-2e0a-3d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074617Z-178bfbc474bv587zhC1NYCny5w00000006xg00000000eefc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:17 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.11	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:17 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:17 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074617Z-174c587ffdfb5q56hC1TEB04kg00000005ng000000002n0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:17 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.11	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:18 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:19 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5493b62-c01e-0046-23bf-3e2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074619Z-178bfbc474bbcwv4hC1NYCypys00000006zg000000007yv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:19 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.11	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:19 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:19 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 512d0a55-c01e-0079-2cc0-3ee51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074619Z-178bfbc474btvfdfhC1NYCa2en0000000760000000009ka7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:19 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.11	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:19 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:19 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: fa8f60f6-901e-0083-3159-3cbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074619Z-15b8b599d88tmlzshC1TEB4xpn00000005k0000000006swz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:19 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.11	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:19 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:19 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 198a258a-e01e-000c-1dbf-3e8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074619Z-178bfbc474brk967hC1NYCfu600000000700000000004hca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:19 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.11	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:19 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:19 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: abaf503b-901e-0064-2b47-3ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074619Z-178bfbc474btrnf9hC1NYCb80g00000007b0000000005d5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:19 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.11	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:21 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:21 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 1a818a33-b01e-005c-4475-3b4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074621Z-174c587ffdfb5q56hC1TEB04kg00000005m0000000007c7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:21 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.11	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:21 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:21 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 259521f4-f01e-003f-28c0-3ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074621Z-178bfbc474b9xljthC1NYCtw94000000072g000000005vdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:21 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.11	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:21 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:21 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: dd6cf878-401e-0067-68b9-3b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074621Z-15b8b599d8885prmhC1TEBsnkw00000005p000000000fwwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:21 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.11	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:21 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9c4c3b32-001e-0028-37e2-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074621Z-15b8b599d88vp97chC1TEB5pzw00000005h000000000e1e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.11	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:21 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 923400a1-601e-005c-187f-3bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074621Z-174c587ffdf4zw2thC1TEBu34000000005p000000000fk9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.11	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:23 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:23 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074623Z-174c587ffdfb5q56hC1TEB04kg00000005n00000000045p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:23 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.11	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:23 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:23 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: aa1ebe18-101e-0017-5340-3c47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074623Z-15b8b599d88pxmdghC1TEBux9c00000005rg000000009n79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:23 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.11	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:23 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: aaf9eac1-201e-0000-4977-3ba537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074624Z-174c587ffdf4zw2thC1TEBu34000000005ng00000000f0ys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.11	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:23 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:24 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e22d4ccd-f01e-001f-230e-3e5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074624Z-178bfbc474bvjk8shC1NYC83ns00000006yg000000009rp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.11	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:23 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:24 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 11574f01-801e-0067-6559-3cfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074624Z-174c587ffdfb74xqhC1TEBhabc00000005p0000000007q7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:24 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.11	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:25 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:25 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: d85dbe48-801e-0067-109a-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074625Z-15b8b599d886w4hzhC1TEBb4ug00000005s0000000004dgs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:25 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.11	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:25 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:25 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 11f5d02a-c01e-008d-30bf-3e2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074625Z-178bfbc474bxkclvhC1NYC69g4000000076g0000000016ew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:26 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.11	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:26 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:26 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:26 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 76b09c20-c01e-0049-7fe4-3eac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074626Z-15b8b599d88tmlzshC1TEB4xpn00000005dg00000000kdq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:26 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.11	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:26 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:26 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: dcdca57e-b01e-003e-0dcb-3b8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074626Z-15b8b599d8885prmhC1TEBsnkw00000005rg00000000a40r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:26 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.11	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:26 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:26 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 19681afd-501e-005b-29d8-3ed7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074626Z-178bfbc474bwlrhlhC1NYCy3kg000000074g000000007s8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:26 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.11	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:28 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:28 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: a9288e84-901e-0016-0fbf-3eefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074628Z-178bfbc474bgvl54hC1NYCsfuw0000000760000000004cde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:28 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.11	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:28 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:28 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 79a67e7b-b01e-0098-1dd0-3ecead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074628Z-178bfbc474bwh9gmhC1NYCy3rs00000007b0000000000rq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:28 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.11	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:28 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:28 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 8f21b959-301e-0096-6e6c-3de71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074628Z-174c587ffdfb5q56hC1TEB04kg00000005pg0000000008y0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:28 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.11	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:28 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 335cca48-001e-0079-7644-3d12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074628Z-174c587ffdf8lw6dhC1TEBkgs800000005ng0000000098nu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.11	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:28 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:28 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:28 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 0a9ad79b-401e-002a-79d1-3ec62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074628Z-178bfbc474bxkclvhC1NYC69g4000000072g0000000072a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:28 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.11	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:30 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:30 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:30 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 2537bc41-601e-0050-496a-3c2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074630Z-174c587ffdf6b487hC1TEBydsn00000005e000000000pqfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:30 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.11	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:30 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:30 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:30 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ee240466-601e-00ab-24f2-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074630Z-178bfbc474bwh9gmhC1NYCy3rs000000078g0000000047pa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:30 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.11	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:30 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:30 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:30 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 74bdb417-d01e-00ad-341a-3de942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074630Z-178bfbc474bv7whqhC1NYC1fg40000000770000000003ndt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:30 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.11	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:30 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:30 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: aaff583f-201e-003f-6a31-3e6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074630Z-15b8b599d88tr2flhC1TEB5gk400000005qg00000000cgvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:31 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.11	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:30 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:30 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 14b1fe77-001e-0014-1a4a-3d5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074630Z-174c587ffdfmlsmvhC1TEBvyks00000005v0000000004sks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:31 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.11	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:32 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:32 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:32 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: c06a529d-f01e-0085-0e9a-3b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074632Z-15b8b599d88s6mj9hC1TEBur3000000005f0000000007we6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:32 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.11	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:32 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:32 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:32 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4a555c2b-b01e-0097-1e0f-3e4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074632Z-178bfbc474bxkclvhC1NYC69g4000000075g000000002p0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:32 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.11	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:32 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:33 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 417fcf05-401e-0035-6dd4-3e82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074633Z-174c587ffdfp4vpjhC1TEBybqw00000005h000000000k2ke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.11	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:32 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:33 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 6b735921-c01e-0066-37ca-3ba1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074633Z-174c587ffdfldtt2hC1TEBwv9c00000005e000000000c8h1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.11	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:32 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:33 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 01d403fe-801e-0078-7dbf-3ebac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074633Z-178bfbc474bwlrhlhC1NYCy3kg000000079000000000047g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.11	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:34 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: ff0b0d52-c01e-002b-2681-3b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074635Z-174c587ffdfb5q56hC1TEB04kg00000005e000000000kv2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.11	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:34 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074635Z-174c587ffdfp4vpjhC1TEBybqw00000005g000000000pxsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.11	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:34 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: c8648c8c-d01e-005a-08bf-3e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074635Z-178bfbc474bgvl54hC1NYCsfuw000000072000000000ax25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.11	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:35 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 919fe78e-701e-0001-556c-3db110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074635Z-15b8b599d88s6mj9hC1TEBur3000000005b000000000h9m3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.11	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:35 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: ebbdbf89-001e-00a2-5a6a-3cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074635Z-174c587ffdf59vqchC1TEByk6800000005t0000000009q8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.11	49843	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:35 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Sy2V4z5bLD9G2Cd&MD=AAYRwpdO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 07:46:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: d5b10364-d5fe-49d1-b68d-93fd993bb2f1 MS-RequestId: 293d6b6d-28c9-4eb0-82e5-b579389d1b93 MS-CV: vctHL8/IE0e7FCji.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 07:46:35 GMT Connection: close Content-Length: 30005
2024-11-25 07:46:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-25 07:46:36 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.11	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:37 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:37 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074637Z-174c587ffdfgcs66hC1TEB69cs00000005cg00000000m0st x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.11	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:37 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:37 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 1eb9d342-301e-005d-4e03-3de448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074637Z-178bfbc474bbbqrhhC1NYCvw74000000078g0000000092de x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.11	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:37 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:37 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 1d464b1a-a01e-006f-30d8-3e13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074637Z-15b8b599d88l2dpthC1TEBmzr000000005q00000000024sm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.11	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:37 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:37 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a1d7de20-e01e-0051-6948-3c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074637Z-178bfbc474bv587zhC1NYCny5w0000000740000000001kef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.11	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:37 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:37 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:37 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8abb671b-d01e-0049-4b0c-3de7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074637Z-178bfbc474b7cbwqhC1NYC8z4n000000071g000000007esp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:37 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.11	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:39 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:39 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: ab1afa94-201e-0085-151a-3d34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074639Z-178bfbc474brk967hC1NYCfu6000000006y0000000007p99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:39 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.11	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:39 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:39 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074639Z-174c587ffdf7t49mhC1TEB4qbg00000005f000000000h7fd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:39 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.11	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:39 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:39 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: b5bbaf22-a01e-0070-528a-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074639Z-174c587ffdf6b487hC1TEBydsn00000005gg00000000e0nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:39 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.11	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:39 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:39 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 6d8f64b9-901e-005b-763b-3c2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074639Z-178bfbc474bscnbchC1NYCe7eg00000007bg000000003drv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:39 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.11	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:39 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:39 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: cd486f0a-401e-0048-5b49-3c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074639Z-178bfbc474bwh9gmhC1NYCy3rs0000000770000000007abz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:40 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.11	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:41 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:41 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 3038b393-701e-0053-5e79-3d3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074641Z-174c587ffdfcb7qhhC1TEB3x7000000005m000000000m8ke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:41 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.11	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:41 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:41 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 8c2dcc7a-801e-0035-158c-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074641Z-174c587ffdf4zw2thC1TEBu34000000005mg00000000ktw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:41 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.11	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:41 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:41 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 0cbfb53e-a01e-0032-47bf-3e1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074641Z-15b8b599d88l2dpthC1TEBmzr000000005qg00000000178p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:41 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.11	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:41 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:42 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:42 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: e5390902-901e-0015-1805-3db284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074642Z-178bfbc474bnwsh4hC1NYC2ubs00000007b0000000000t6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:42 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.11	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:41 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:42 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:42 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 6f4cb3f3-b01e-001e-09eb-3e0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074642Z-15b8b599d88tr2flhC1TEB5gk400000005r000000000au0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:42 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.11	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:43 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:43 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c87fa586-301e-0052-7045-3c65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074643Z-174c587ffdfb5q56hC1TEB04kg00000005fg00000000f1uq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.11	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:43 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:44 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: e8ec328a-c01e-0049-1675-3cac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074644Z-174c587ffdfcb7qhhC1TEB3x7000000005t0000000003v6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:44 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.11	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:43 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:44 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: f666aca1-b01e-0097-79bf-3e4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074644Z-178bfbc474bpnd5vhC1NYC4vr4000000072g00000000bh9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:44 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.11	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:44 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:44 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 8aae7f5a-601e-003d-50d1-3e6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074644Z-178bfbc474bbcwv4hC1NYCypys0000000740000000000r0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:44 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.11	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:44 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:44 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: fe20bd9e-901e-0015-51c1-3eb284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074644Z-178bfbc474bscnbchC1NYCe7eg00000007c0000000002v8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:44 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.11	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:45 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:46 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 20b63373-d01e-0028-3dbf-3e7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074646Z-15b8b599d88m7pn7hC1TEB4axw00000005s00000000040vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 07:46:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.11	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:45 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 8845505f-c01e-0082-76b9-3eaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074646Z-178bfbc474btrnf9hC1NYCb80g00000007cg000000002fkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.11	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:45 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:46 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 64b2ebdf-b01e-003e-7bbf-3e8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074646Z-178bfbc474b9xljthC1NYCtw940000000740000000003cx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:46 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.11	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:46 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:46 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: c395e515-b01e-003e-541d-3e8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074646Z-178bfbc474bgvl54hC1NYCsfuw000000073g000000008rrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:46 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.11	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 07:46:46 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 07:46:46 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 07:46:46 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 64618aee-401e-00ac-33d1-3e0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T074646Z-15b8b599d88hr8sfhC1TEBbca400000005fg00000000a8ux x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 07:46:46 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2452, Parent PID: 6992

General

Target ID:	4
Start time:	02:45:35
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3064, Parent PID: 2452

General

Target ID:	6
Start time:	02:45:38
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2532,i,4082695311861681308,2717946964609321151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6172, Parent PID: 6992

General

Target ID:	7
Start time:	02:45:40
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://henselsreadymix.com"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://henselsreadymix.com/	HTTP Parser: No favicon
Source: https://henselsreadymix.com/?C=M;O=A	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: henselsreadymix.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /icons/blank.gif HTTP/1.1Host: henselsreadymix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://henselsreadymix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: henselsreadymix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://henselsreadymix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/blank.gif HTTP/1.1Host: henselsreadymix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?C=M;O=A HTTP/1.1Host: henselsreadymix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://henselsreadymix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Sy2V4z5bLD9G2Cd&MD=AAYRwpdO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Sy2V4z5bLD9G2Cd&MD=AAYRwpdO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: henselsreadymix.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://henselsreadymix.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2452, Parent PID: 6992

Windows Analysis Report
http://henselsreadymix.com