Edit tour

Windows Analysis Report
http://loaksandtheir.info

Overview

General Information

Sample URL:	http://loaksandtheir.info
Analysis ID:	1562440
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1976,i,387968193575612774,13619486285972469231,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://loaksandtheir.info" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.32:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49796 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XonzmWMYSBRDvVt&MD=Tuh4YFYA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XonzmWMYSBRDvVt&MD=Tuh4YFYA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: loaksandtheir.infoConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: loaksandtheir.info
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.32:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49796 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/0@4/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1976,i,387968193575612774,13619486285972469231,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://loaksandtheir.info"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1976,i,387968193575612774,13619486285972469231,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://loaksandtheir.info	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
loaksandtheir.info	108.158.75.96	true	false		high
www.google.com	172.217.21.36	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://loaksandtheir.info/	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.158.75.96	loaksandtheir.info	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.23
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562440
Start date and time:	2024-11-25 15:32:25 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://loaksandtheir.info
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/0@4/6

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.17.46, 74.125.205.84, 34.104.35.123, 84.201.211.23, 192.229.221.95, 172.217.17.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, ocsp.digicert.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, otelrules.azureedge.net, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://loaksandtheir.info

Simulations

Behavior and APIs

⊘No simulations

Input	Output
URL: http://loaksandtheir.info Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: http://loaksandtheir.info

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 15:33:26.251319885 CET	49675	443	192.168.2.4	173.222.162.32
Nov 25, 2024 15:33:31.178190947 CET	49736	80	192.168.2.4	108.158.75.96
Nov 25, 2024 15:33:31.178673983 CET	49737	80	192.168.2.4	108.158.75.96
Nov 25, 2024 15:33:31.313821077 CET	80	49736	108.158.75.96	192.168.2.4
Nov 25, 2024 15:33:31.313934088 CET	49736	80	192.168.2.4	108.158.75.96
Nov 25, 2024 15:33:31.314074039 CET	80	49737	108.158.75.96	192.168.2.4
Nov 25, 2024 15:33:31.314151049 CET	49736	80	192.168.2.4	108.158.75.96
Nov 25, 2024 15:33:31.314157009 CET	49737	80	192.168.2.4	108.158.75.96
Nov 25, 2024 15:33:31.441062927 CET	80	49736	108.158.75.96	192.168.2.4
Nov 25, 2024 15:33:32.046786070 CET	49739	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:33:32.046824932 CET	443	49739	172.217.21.36	192.168.2.4
Nov 25, 2024 15:33:32.046968937 CET	49739	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:33:32.047204971 CET	49739	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:33:32.047220945 CET	443	49739	172.217.21.36	192.168.2.4
Nov 25, 2024 15:33:33.042798996 CET	80	49736	108.158.75.96	192.168.2.4
Nov 25, 2024 15:33:33.094234943 CET	49736	80	192.168.2.4	108.158.75.96
Nov 25, 2024 15:33:33.858225107 CET	443	49739	172.217.21.36	192.168.2.4
Nov 25, 2024 15:33:33.858577013 CET	49739	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:33:33.858603954 CET	443	49739	172.217.21.36	192.168.2.4
Nov 25, 2024 15:33:33.861063004 CET	443	49739	172.217.21.36	192.168.2.4
Nov 25, 2024 15:33:33.861126900 CET	49739	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:33:33.862390041 CET	49739	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:33:33.862761021 CET	443	49739	172.217.21.36	192.168.2.4
Nov 25, 2024 15:33:33.907994986 CET	49739	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:33:33.908026934 CET	443	49739	172.217.21.36	192.168.2.4
Nov 25, 2024 15:33:33.954849958 CET	49739	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:33:33.962307930 CET	49740	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:33.962357044 CET	443	49740	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:33.962443113 CET	49740	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:33.964510918 CET	49740	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:33.964525938 CET	443	49740	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:35.398025036 CET	443	49740	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:35.400892019 CET	49740	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:35.447390079 CET	49740	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:35.447439909 CET	443	49740	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:35.447736979 CET	443	49740	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:35.493204117 CET	49740	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:35.539340019 CET	443	49740	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:35.982633114 CET	443	49740	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:35.982692003 CET	443	49740	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:35.982744932 CET	49740	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:35.982892036 CET	49740	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:35.982908964 CET	443	49740	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:35.982919931 CET	49740	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:35.982924938 CET	443	49740	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:36.023720026 CET	49741	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:36.023766041 CET	443	49741	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:36.023852110 CET	49741	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:36.024286985 CET	49741	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:36.024305105 CET	443	49741	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:37.143379927 CET	49742	443	192.168.2.4	173.222.162.32
Nov 25, 2024 15:33:37.143419027 CET	443	49742	173.222.162.32	192.168.2.4
Nov 25, 2024 15:33:37.143479109 CET	49742	443	192.168.2.4	173.222.162.32
Nov 25, 2024 15:33:37.143783092 CET	49742	443	192.168.2.4	173.222.162.32
Nov 25, 2024 15:33:37.143796921 CET	443	49742	173.222.162.32	192.168.2.4
Nov 25, 2024 15:33:37.410633087 CET	443	49741	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:37.410733938 CET	49741	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:37.412134886 CET	49741	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:37.412159920 CET	443	49741	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:37.413012028 CET	443	49741	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:37.414236069 CET	49741	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:37.455362082 CET	443	49741	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:37.980535030 CET	443	49741	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:37.980614901 CET	443	49741	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:37.980705023 CET	49741	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:37.981581926 CET	49741	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:37.981632948 CET	443	49741	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:37.981663942 CET	49741	443	192.168.2.4	23.218.208.109
Nov 25, 2024 15:33:37.981681108 CET	443	49741	23.218.208.109	192.168.2.4
Nov 25, 2024 15:33:38.530903101 CET	443	49742	173.222.162.32	192.168.2.4
Nov 25, 2024 15:33:38.530989885 CET	49742	443	192.168.2.4	173.222.162.32
Nov 25, 2024 15:33:39.771608114 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:39.771644115 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:39.771770954 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:39.773153067 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:39.773161888 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:41.647614002 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:41.647696972 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:41.651604891 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:41.651611090 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:41.651822090 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:41.704880953 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:43.279357910 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:43.293127060 CET	49723	80	192.168.2.4	199.232.214.172
Nov 25, 2024 15:33:43.323328018 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.423357010 CET	80	49723	199.232.214.172	192.168.2.4
Nov 25, 2024 15:33:43.423464060 CET	49723	80	192.168.2.4	199.232.214.172
Nov 25, 2024 15:33:43.548296928 CET	443	49739	172.217.21.36	192.168.2.4
Nov 25, 2024 15:33:43.548381090 CET	443	49739	172.217.21.36	192.168.2.4
Nov 25, 2024 15:33:43.548446894 CET	49739	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:33:43.900798082 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.900825977 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.900834084 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.900861025 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.900883913 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.900892019 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:43.900895119 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.900909901 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.900935888 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:43.900964022 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:43.919920921 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.919977903 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:43.919982910 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.920002937 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:43.920046091 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:44.582789898 CET	49739	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:33:44.582835913 CET	443	49739	172.217.21.36	192.168.2.4
Nov 25, 2024 15:33:45.461885929 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:45.461909056 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:45.461932898 CET	49743	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:33:45.461941004 CET	443	49743	52.149.20.212	192.168.2.4
Nov 25, 2024 15:33:57.940006971 CET	443	49742	173.222.162.32	192.168.2.4
Nov 25, 2024 15:33:57.940088987 CET	49742	443	192.168.2.4	173.222.162.32
Nov 25, 2024 15:34:02.685125113 CET	80	49737	108.158.75.96	192.168.2.4
Nov 25, 2024 15:34:02.689009905 CET	49737	80	192.168.2.4	108.158.75.96
Nov 25, 2024 15:34:04.582967043 CET	49737	80	192.168.2.4	108.158.75.96
Nov 25, 2024 15:34:04.703376055 CET	80	49737	108.158.75.96	192.168.2.4
Nov 25, 2024 15:34:17.346371889 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:17.346437931 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:17.346508980 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:17.347124100 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:17.347141981 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:18.048723936 CET	49736	80	192.168.2.4	108.158.75.96
Nov 25, 2024 15:34:18.175623894 CET	80	49736	108.158.75.96	192.168.2.4
Nov 25, 2024 15:34:19.211850882 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.211971045 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.216078997 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.216094971 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.216399908 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.227123976 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.267334938 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.709228992 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.709362030 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.709403992 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.709445953 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.709490061 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.709511995 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.709563017 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.907198906 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.907278061 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.907299995 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.907341957 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.907366991 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.907402039 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.938050032 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.938119888 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.938138008 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.938159943 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:19.938203096 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:19.938225031 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.089289904 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.089317083 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.089381933 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.089401960 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.089437008 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.089462042 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.115622997 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.115648031 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.115699053 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.115715027 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.115757942 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.115770102 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.137586117 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.137608051 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.137655020 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.137674093 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.137698889 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.137725115 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.154484987 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.154505014 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.154577971 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.154596090 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.154670954 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.297000885 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.297032118 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.297094107 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.297116041 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.297159910 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.297180891 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.310447931 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.310467005 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.310530901 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.310543060 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.310581923 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.326225996 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.326247931 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.326292992 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.326306105 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.326351881 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.326353073 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.337733030 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.337754965 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.337832928 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.337842941 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.337872028 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.337882042 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.348737955 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.348757982 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.348917961 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.348926067 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.348985910 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.359019995 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.359038115 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.359098911 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.359124899 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.359221935 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.362401009 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.362478018 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.362545013 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.362545013 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.362763882 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.362763882 CET	49749	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.362782955 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.362792969 CET	443	49749	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.423530102 CET	49750	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.423579931 CET	443	49750	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.423674107 CET	49750	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.423964024 CET	49751	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.424009085 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.424063921 CET	49751	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.426167011 CET	49752	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.426209927 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.426256895 CET	49752	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.454741001 CET	49753	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.454803944 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.454905987 CET	49753	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.455256939 CET	49750	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.455286026 CET	443	49750	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.455405951 CET	49753	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.455420017 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.456060886 CET	49751	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.456099033 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.456125975 CET	49752	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.456160069 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.457412958 CET	49754	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.457444906 CET	443	49754	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:20.457498074 CET	49754	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.457669020 CET	49754	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:20.457679033 CET	443	49754	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:21.811180115 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:21.811300039 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:21.811402082 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:21.811747074 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:21.811781883 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:22.579730988 CET	443	49754	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.580473900 CET	49754	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:22.580507994 CET	443	49754	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.581204891 CET	49754	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:22.581212044 CET	443	49754	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.581351042 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.581823111 CET	49753	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:22.581852913 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.582475901 CET	49753	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:22.582488060 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.582511902 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.582782030 CET	49752	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:22.582796097 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.583173990 CET	49752	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:22.583178997 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.659142017 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.659938097 CET	49751	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:22.659985065 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.660376072 CET	49751	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:22.660383940 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.841830969 CET	443	49750	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.842473030 CET	49750	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:22.842489958 CET	443	49750	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:22.843004942 CET	49750	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:22.843010902 CET	443	49750	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.032751083 CET	443	49754	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.032809019 CET	443	49754	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.032862902 CET	49754	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.033255100 CET	49754	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.033284903 CET	443	49754	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.033303976 CET	49754	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.033313036 CET	443	49754	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.038722992 CET	49756	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.038768053 CET	443	49756	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.038827896 CET	49756	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.039019108 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.039042950 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.039050102 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.039074898 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.039093971 CET	49756	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.039108992 CET	49753	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.039113045 CET	443	49756	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.039136887 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.039171934 CET	49752	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.039256096 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.039331913 CET	49752	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.039550066 CET	49753	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.039566994 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.039576054 CET	49753	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.039716005 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.039743900 CET	443	49753	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.039783001 CET	49753	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.041548014 CET	49752	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.041555882 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.041573048 CET	49752	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.041701078 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.041729927 CET	443	49752	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.041778088 CET	49752	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.044858932 CET	49757	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.044888020 CET	443	49757	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.044946909 CET	49757	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.045151949 CET	49757	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.045164108 CET	443	49757	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.047967911 CET	49758	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.048003912 CET	443	49758	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.048064947 CET	49758	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.048470974 CET	49758	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.048484087 CET	443	49758	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.145359039 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.145386934 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.146405935 CET	49751	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.146434069 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.146985054 CET	49751	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.152595997 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.152657032 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.152865887 CET	49751	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.152865887 CET	49751	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.155335903 CET	49751	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.155364990 CET	443	49751	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.159236908 CET	49759	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.159277916 CET	443	49759	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.159359932 CET	49759	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.159662008 CET	49759	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.159672976 CET	443	49759	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.286768913 CET	443	49750	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.286848068 CET	443	49750	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.286897898 CET	49750	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.287195921 CET	49750	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.287214994 CET	443	49750	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.287242889 CET	49750	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.287256002 CET	443	49750	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.290606022 CET	49760	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.290652990 CET	443	49760	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.290714025 CET	49760	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.290939093 CET	49760	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:23.290952921 CET	443	49760	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:23.655477047 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:23.655571938 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:23.657665968 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:23.657696009 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:23.657957077 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:23.668415070 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:23.715333939 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.389868021 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.389894962 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.389928102 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.390036106 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:24.390036106 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:24.390089989 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.390170097 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:24.427905083 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.427984953 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.428028107 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:24.428071022 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.428107023 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:24.428211927 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.428313971 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:24.446677923 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:24.446677923 CET	49755	443	192.168.2.4	52.149.20.212
Nov 25, 2024 15:34:24.446731091 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.446744919 CET	443	49755	52.149.20.212	192.168.2.4
Nov 25, 2024 15:34:24.791634083 CET	443	49758	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:24.792762995 CET	49758	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:24.792763948 CET	49758	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:24.792845964 CET	443	49758	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:24.792886972 CET	443	49758	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:24.905323982 CET	443	49757	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:24.906162977 CET	49757	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:24.906196117 CET	443	49757	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:24.906507969 CET	49757	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:24.906517982 CET	443	49757	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:24.935946941 CET	443	49756	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:24.936598063 CET	49756	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:24.936646938 CET	443	49756	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:24.937084913 CET	49756	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:24.937098980 CET	443	49756	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.009227991 CET	443	49759	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.009972095 CET	49759	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.010001898 CET	443	49759	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.010451078 CET	49759	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.010458946 CET	443	49759	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.154916048 CET	443	49760	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.155766010 CET	49760	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.155798912 CET	443	49760	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.156198978 CET	49760	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.156204939 CET	443	49760	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.264008999 CET	443	49758	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.264075041 CET	443	49758	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.264372110 CET	49758	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.264439106 CET	49758	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.264439106 CET	49758	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.264483929 CET	443	49758	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.264525890 CET	443	49758	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.267714024 CET	49761	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.267769098 CET	443	49761	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.267849922 CET	49761	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.267993927 CET	49761	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.268014908 CET	443	49761	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.363301039 CET	443	49757	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.363379955 CET	443	49757	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.363554001 CET	49757	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.363939047 CET	49757	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.363965034 CET	443	49757	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.363981962 CET	49757	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.363987923 CET	443	49757	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.367932081 CET	49762	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.367980957 CET	443	49762	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.368079901 CET	49762	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.368315935 CET	49762	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.368333101 CET	443	49762	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.385637999 CET	443	49756	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.385719061 CET	443	49756	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.386009932 CET	49756	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.386054039 CET	49756	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.386076927 CET	443	49756	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.386087894 CET	49756	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.386096954 CET	443	49756	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.389276028 CET	49763	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.389322042 CET	443	49763	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.389415026 CET	49763	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.389583111 CET	49763	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.389595985 CET	443	49763	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.468200922 CET	443	49759	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.468278885 CET	443	49759	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.468380928 CET	49759	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.468669891 CET	49759	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.468693018 CET	443	49759	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.468708038 CET	49759	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.468713999 CET	443	49759	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.472167969 CET	49764	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.472217083 CET	443	49764	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.472316980 CET	49764	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.472518921 CET	49764	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.472532034 CET	443	49764	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.615415096 CET	443	49760	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.615510941 CET	443	49760	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.615612030 CET	49760	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.615874052 CET	49760	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.615895987 CET	443	49760	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.615911961 CET	49760	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.615916967 CET	443	49760	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.618798018 CET	49765	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.618834019 CET	443	49765	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:25.621016979 CET	49765	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.621170998 CET	49765	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:25.621186972 CET	443	49765	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.161317110 CET	443	49761	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.161994934 CET	49761	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.162019968 CET	443	49761	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.162492037 CET	49761	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.162497997 CET	443	49761	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.567822933 CET	443	49763	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.568471909 CET	49763	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.568485975 CET	443	49763	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.568965912 CET	49763	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.568970919 CET	443	49763	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.573554993 CET	443	49762	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.574032068 CET	49762	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.574071884 CET	443	49762	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.574565887 CET	49762	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.574572086 CET	443	49762	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.662290096 CET	443	49761	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.662358046 CET	443	49761	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.662657976 CET	49761	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.662687063 CET	49761	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.662703991 CET	443	49761	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.662714958 CET	49761	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.662719965 CET	443	49761	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.666121006 CET	49766	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.666168928 CET	443	49766	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.666282892 CET	49766	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.666418076 CET	49766	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.666430950 CET	443	49766	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.682137966 CET	443	49765	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.682915926 CET	49765	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.682934999 CET	443	49765	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.683578014 CET	49765	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.683584929 CET	443	49765	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.692090988 CET	443	49764	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.692534924 CET	49764	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.692544937 CET	443	49764	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:27.693125963 CET	49764	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:27.693130016 CET	443	49764	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.023642063 CET	443	49762	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.023828983 CET	443	49762	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.025006056 CET	49762	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.025047064 CET	49762	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.025068998 CET	443	49762	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.025088072 CET	49762	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.025094032 CET	443	49762	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.026671886 CET	443	49763	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.026757002 CET	443	49763	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.026840925 CET	49763	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.027081966 CET	49763	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.027101040 CET	443	49763	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.027112007 CET	49763	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.027118921 CET	443	49763	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.028645992 CET	49767	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.028680086 CET	443	49767	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.028749943 CET	49767	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.029164076 CET	49767	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.029181957 CET	443	49767	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.029376984 CET	49768	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.029418945 CET	443	49768	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.029546022 CET	49768	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.029772997 CET	49768	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.029791117 CET	443	49768	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.141885042 CET	443	49764	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.141957045 CET	443	49764	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.142247915 CET	49764	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.142247915 CET	49764	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.142273903 CET	49764	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.142291069 CET	443	49764	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.145315886 CET	49770	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.145368099 CET	443	49770	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.145438910 CET	49770	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.145576954 CET	49770	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.145591974 CET	443	49770	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.434238911 CET	443	49765	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.435743093 CET	443	49765	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.435857058 CET	49765	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.435857058 CET	49765	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.435893059 CET	49765	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.435910940 CET	443	49765	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.439348936 CET	49771	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.439393997 CET	443	49771	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:28.440098047 CET	49771	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.440252066 CET	49771	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:28.440265894 CET	443	49771	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.524409056 CET	443	49766	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.525156975 CET	49766	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:29.525181055 CET	443	49766	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.525578022 CET	49766	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:29.525588989 CET	443	49766	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.758790970 CET	443	49767	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.759509087 CET	49767	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:29.759521008 CET	443	49767	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.760121107 CET	49767	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:29.760126114 CET	443	49767	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.826073885 CET	443	49768	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.826736927 CET	49768	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:29.826764107 CET	443	49768	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.827454090 CET	49768	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:29.827461004 CET	443	49768	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.951086998 CET	443	49770	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.951699018 CET	49770	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:29.951718092 CET	443	49770	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:29.952187061 CET	49770	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:29.952193022 CET	443	49770	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.036876917 CET	443	49766	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.036945105 CET	443	49766	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.037009001 CET	49766	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.046041012 CET	49766	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.046073914 CET	443	49766	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.046168089 CET	49766	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.046185970 CET	443	49766	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.051983118 CET	49772	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.052035093 CET	443	49772	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.052114010 CET	49772	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.052576065 CET	49772	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.052591085 CET	443	49772	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.204915047 CET	443	49767	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.204987049 CET	443	49767	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.205488920 CET	49767	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.205490112 CET	49767	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.208934069 CET	49767	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.208934069 CET	49773	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.208966970 CET	443	49767	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.208976984 CET	443	49773	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.209302902 CET	49773	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.209302902 CET	49773	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.209342957 CET	443	49773	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.271071911 CET	443	49768	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.271140099 CET	443	49768	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.271229029 CET	49768	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.271518946 CET	49768	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.271538973 CET	443	49768	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.271552086 CET	49768	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.271559000 CET	443	49768	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.275377989 CET	49774	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.275430918 CET	443	49774	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.275707006 CET	49774	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.275938034 CET	49774	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.275952101 CET	443	49774	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.287794113 CET	443	49771	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.288422108 CET	49771	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.288450956 CET	443	49771	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.288933992 CET	49771	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.288942099 CET	443	49771	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.419397116 CET	443	49770	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.419470072 CET	443	49770	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.419536114 CET	49770	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.419754982 CET	49770	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.419776917 CET	443	49770	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.419789076 CET	49770	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.419795036 CET	443	49770	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.423542976 CET	49775	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.423592091 CET	443	49775	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.423847914 CET	49775	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.424397945 CET	49775	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.424412012 CET	443	49775	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.720736980 CET	49724	80	192.168.2.4	199.232.214.172
Nov 25, 2024 15:34:30.745541096 CET	443	49771	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.745611906 CET	443	49771	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.746143103 CET	49771	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.746424913 CET	49771	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.746457100 CET	443	49771	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.746474981 CET	49771	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.746480942 CET	443	49771	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.751230955 CET	49776	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.751281023 CET	443	49776	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.751349926 CET	49776	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.751667023 CET	49776	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:30.751679897 CET	443	49776	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:30.845109940 CET	80	49724	199.232.214.172	192.168.2.4
Nov 25, 2024 15:34:30.845210075 CET	49724	80	192.168.2.4	199.232.214.172
Nov 25, 2024 15:34:31.786107063 CET	443	49772	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:31.786818027 CET	49772	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:31.786848068 CET	443	49772	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:31.787749052 CET	49772	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:31.787755013 CET	443	49772	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:31.972542048 CET	49777	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:34:31.972587109 CET	443	49777	172.217.21.36	192.168.2.4
Nov 25, 2024 15:34:31.972695112 CET	49777	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:34:31.972956896 CET	49777	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:34:31.972971916 CET	443	49777	172.217.21.36	192.168.2.4
Nov 25, 2024 15:34:31.997745991 CET	443	49773	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:31.998430967 CET	49773	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:31.998454094 CET	443	49773	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:31.999074936 CET	49773	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:31.999079943 CET	443	49773	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.228888035 CET	443	49772	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.228956938 CET	443	49772	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.229011059 CET	49772	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.229268074 CET	49772	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.229293108 CET	443	49772	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.229307890 CET	49772	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.229314089 CET	443	49772	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.233040094 CET	49778	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.233091116 CET	443	49778	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.233207941 CET	49778	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.233409882 CET	49778	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.233418941 CET	443	49778	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.246659040 CET	443	49774	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.247215986 CET	49774	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.247232914 CET	443	49774	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.247725964 CET	49774	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.247731924 CET	443	49774	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.273432016 CET	443	49775	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.273967028 CET	49775	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.273973942 CET	443	49775	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.274573088 CET	49775	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.274576902 CET	443	49775	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.446310043 CET	443	49773	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.446374893 CET	443	49773	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.446496010 CET	49773	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.447110891 CET	49773	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.447110891 CET	49773	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.447137117 CET	443	49773	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.447140932 CET	443	49773	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.451805115 CET	49779	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.451839924 CET	443	49779	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.451905966 CET	49779	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.452212095 CET	49779	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.452222109 CET	443	49779	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.678212881 CET	443	49776	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.678832054 CET	49776	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.678863049 CET	443	49776	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.679399967 CET	49776	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.679409981 CET	443	49776	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.699784994 CET	443	49774	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.699858904 CET	443	49774	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.700172901 CET	49774	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.700212955 CET	49774	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.700234890 CET	443	49774	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.700246096 CET	49774	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.700252056 CET	443	49774	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.703571081 CET	49780	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.703617096 CET	443	49780	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.703849077 CET	49780	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.703849077 CET	49780	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.703882933 CET	443	49780	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.727273941 CET	443	49775	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.727365017 CET	443	49775	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.727545023 CET	49775	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.727545023 CET	49775	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.727581024 CET	49775	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.727586985 CET	443	49775	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.730488062 CET	49781	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.730566978 CET	443	49781	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:32.730655909 CET	49781	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.730820894 CET	49781	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:32.730849981 CET	443	49781	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:33.134644985 CET	443	49776	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:33.134721994 CET	443	49776	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:33.134850979 CET	49776	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:33.135137081 CET	49776	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:33.135153055 CET	443	49776	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:33.138509035 CET	49782	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:33.138551950 CET	443	49782	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:33.138675928 CET	49782	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:33.138839006 CET	49782	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:33.138848066 CET	443	49782	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:33.760602951 CET	443	49777	172.217.21.36	192.168.2.4
Nov 25, 2024 15:34:33.760981083 CET	49777	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:34:33.760998011 CET	443	49777	172.217.21.36	192.168.2.4
Nov 25, 2024 15:34:33.762202024 CET	443	49777	172.217.21.36	192.168.2.4
Nov 25, 2024 15:34:33.762732029 CET	49777	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:34:33.763005018 CET	443	49777	172.217.21.36	192.168.2.4
Nov 25, 2024 15:34:33.814341068 CET	49777	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:34:34.015717983 CET	443	49778	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.016321898 CET	49778	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.016344070 CET	443	49778	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.016972065 CET	49778	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.016977072 CET	443	49778	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.250626087 CET	443	49779	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.251305103 CET	49779	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.251341105 CET	443	49779	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.251781940 CET	49779	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.251786947 CET	443	49779	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.484837055 CET	443	49778	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.484896898 CET	443	49778	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.485038996 CET	49778	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.485313892 CET	49778	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.485340118 CET	443	49778	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.485357046 CET	49778	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.485363007 CET	443	49778	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.488961935 CET	49783	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.489013910 CET	443	49783	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.489089012 CET	49783	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.489361048 CET	49783	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.489372015 CET	443	49783	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.490942955 CET	443	49780	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.491600037 CET	49780	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.491624117 CET	443	49780	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.491940975 CET	49780	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.491946936 CET	443	49780	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.557148933 CET	443	49781	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.557777882 CET	49781	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.557806015 CET	443	49781	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.558353901 CET	49781	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.558357954 CET	443	49781	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.697426081 CET	443	49779	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.697489977 CET	443	49779	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.697690010 CET	49779	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.697858095 CET	49779	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.697875977 CET	443	49779	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.697889090 CET	49779	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.697894096 CET	443	49779	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.701318026 CET	49784	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.701351881 CET	443	49784	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.701435089 CET	49784	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.701623917 CET	49784	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.701633930 CET	443	49784	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.941406012 CET	443	49780	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.941507101 CET	443	49780	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.941728115 CET	49780	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.941793919 CET	49780	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.941793919 CET	49780	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.941817999 CET	443	49780	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.941831112 CET	443	49780	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.944504023 CET	49785	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.944551945 CET	443	49785	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.944645882 CET	49785	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.944789886 CET	49785	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.944803953 CET	443	49785	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.996010065 CET	443	49782	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.996767998 CET	49782	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.996790886 CET	443	49782	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:34.997283936 CET	49782	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:34.997289896 CET	443	49782	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.003179073 CET	443	49781	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.003241062 CET	443	49781	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.003304958 CET	49781	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.003509045 CET	49781	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.003509045 CET	49781	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.003565073 CET	443	49781	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.003592014 CET	443	49781	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.006593943 CET	49786	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.006644011 CET	443	49786	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.006759882 CET	49786	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.006916046 CET	49786	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.006926060 CET	443	49786	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.454154968 CET	443	49782	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.454226971 CET	443	49782	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.454268932 CET	49782	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.454507113 CET	49782	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.454526901 CET	443	49782	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.454545021 CET	49782	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.454550982 CET	443	49782	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.457850933 CET	49787	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.457890034 CET	443	49787	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:35.457953930 CET	49787	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.458112955 CET	49787	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:35.458125114 CET	443	49787	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.338746071 CET	443	49783	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.339461088 CET	49783	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.339495897 CET	443	49783	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.339996099 CET	49783	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.340007067 CET	443	49783	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.549947977 CET	443	49784	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.552448988 CET	49784	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.552485943 CET	443	49784	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.552933931 CET	49784	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.552946091 CET	443	49784	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.731581926 CET	443	49785	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.732481003 CET	49785	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.732505083 CET	443	49785	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.732996941 CET	49785	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.733004093 CET	443	49785	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.793392897 CET	443	49783	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.793557882 CET	443	49783	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.793798923 CET	49783	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.793847084 CET	49783	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.793847084 CET	49783	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.793869019 CET	443	49783	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.793878078 CET	443	49783	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.797441959 CET	49788	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.797488928 CET	443	49788	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.797597885 CET	49788	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.797856092 CET	49788	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.797869921 CET	443	49788	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.864490032 CET	443	49786	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.865293026 CET	49786	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.865307093 CET	443	49786	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:36.865837097 CET	49786	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:36.865842104 CET	443	49786	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.007956028 CET	443	49784	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.008034945 CET	443	49784	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.008095980 CET	49784	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.008353949 CET	49784	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.008371115 CET	443	49784	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.008382082 CET	49784	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.008388042 CET	443	49784	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.011914015 CET	49789	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.011957884 CET	443	49789	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.012065887 CET	49789	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.012275934 CET	49789	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.012291908 CET	443	49789	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.185384035 CET	443	49785	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.185468912 CET	443	49785	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.185528994 CET	49785	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.185745001 CET	49785	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.185776949 CET	443	49785	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.185786963 CET	49785	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.185792923 CET	443	49785	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.189408064 CET	49790	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.189448118 CET	443	49790	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.189532042 CET	49790	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.189687967 CET	49790	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.189702034 CET	443	49790	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.311323881 CET	443	49787	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.311899900 CET	49787	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.311913967 CET	443	49787	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.312438965 CET	49787	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.312443972 CET	443	49787	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.325828075 CET	443	49786	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.325896978 CET	443	49786	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.326054096 CET	49786	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.326251984 CET	49786	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.326268911 CET	443	49786	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.326281071 CET	49786	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.326286077 CET	443	49786	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.329719067 CET	49791	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.329767942 CET	443	49791	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.329843044 CET	49791	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.330543041 CET	49791	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.330560923 CET	443	49791	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.780502081 CET	443	49787	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.780575991 CET	443	49787	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.780625105 CET	49787	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.780935049 CET	49787	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.780958891 CET	443	49787	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.780967951 CET	49787	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.780973911 CET	443	49787	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.784194946 CET	49792	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.784231901 CET	443	49792	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:37.784307003 CET	49792	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.784590960 CET	49792	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:37.784603119 CET	443	49792	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.531816006 CET	443	49788	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.532434940 CET	49788	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.532449007 CET	443	49788	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.532969952 CET	49788	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.532978058 CET	443	49788	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.796479940 CET	443	49789	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.797197104 CET	49789	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.797224045 CET	443	49789	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.797818899 CET	49789	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.797827005 CET	443	49789	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.916846991 CET	443	49790	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.917531013 CET	49790	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.917552948 CET	443	49790	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.918114901 CET	49790	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.918119907 CET	443	49790	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.970690012 CET	443	49788	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.970799923 CET	443	49788	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.970877886 CET	49788	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.971338034 CET	49788	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.971368074 CET	443	49788	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.971385956 CET	49788	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.971393108 CET	443	49788	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.974571943 CET	49793	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.974632025 CET	443	49793	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:38.974729061 CET	49793	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.974908113 CET	49793	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:38.974925041 CET	443	49793	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.136199951 CET	443	49791	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.136811018 CET	49791	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.136831045 CET	443	49791	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.137317896 CET	49791	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.137325048 CET	443	49791	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.248675108 CET	443	49789	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.248744011 CET	443	49789	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.248821020 CET	49789	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.249109983 CET	49789	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.249109983 CET	49789	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.249131918 CET	443	49789	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.249154091 CET	443	49789	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.252366066 CET	49794	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.252407074 CET	443	49794	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.252595901 CET	49794	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.252811909 CET	49794	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.252825975 CET	443	49794	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.378958941 CET	443	49790	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.379010916 CET	443	49790	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.379067898 CET	49790	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.379333019 CET	49790	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.379355907 CET	443	49790	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.379370928 CET	49790	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.379378080 CET	443	49790	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.382734060 CET	49795	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.382791042 CET	443	49795	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.382864952 CET	49795	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.383084059 CET	49795	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.383112907 CET	443	49795	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.585860968 CET	443	49791	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.585956097 CET	443	49791	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.586251974 CET	49791	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.586286068 CET	49791	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.586286068 CET	49791	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.586306095 CET	443	49791	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.586317062 CET	443	49791	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.590059042 CET	49796	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.590114117 CET	443	49796	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.590243101 CET	49796	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.590514898 CET	49796	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.590528011 CET	443	49796	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.674170017 CET	443	49792	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.674952030 CET	49792	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.674990892 CET	443	49792	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:39.675645113 CET	49792	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:39.675652981 CET	443	49792	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:40.110534906 CET	443	49792	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:40.110631943 CET	443	49792	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:40.110687971 CET	49792	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:40.110930920 CET	49792	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:40.110961914 CET	443	49792	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:40.110980988 CET	49792	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:40.110986948 CET	443	49792	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:40.114510059 CET	49797	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:40.114553928 CET	443	49797	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:40.114801884 CET	49797	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:40.114981890 CET	49797	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:40.114993095 CET	443	49797	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:40.775369883 CET	443	49793	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:40.776087046 CET	49793	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:40.776108027 CET	443	49793	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:40.776712894 CET	49793	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:40.776720047 CET	443	49793	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.154222012 CET	443	49794	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.154959917 CET	49794	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.154987097 CET	443	49794	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.155688047 CET	49794	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.155694008 CET	443	49794	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.224505901 CET	443	49793	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.224579096 CET	443	49793	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.224627018 CET	49793	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.224837065 CET	49793	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.224853039 CET	443	49793	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.224864960 CET	49793	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.224870920 CET	443	49793	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.228414059 CET	49798	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.228460073 CET	443	49798	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.228519917 CET	49798	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.228683949 CET	49798	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.228698015 CET	443	49798	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.232186079 CET	443	49795	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.232589006 CET	49795	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.232609034 CET	443	49795	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.233190060 CET	49795	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.233195066 CET	443	49795	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.373708010 CET	443	49796	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.374317884 CET	49796	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.374340057 CET	443	49796	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.374891996 CET	49796	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.374897957 CET	443	49796	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.610214949 CET	443	49794	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.610383034 CET	443	49794	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.610438108 CET	49794	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.610626936 CET	49794	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.610646009 CET	443	49794	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.610665083 CET	49794	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.610670090 CET	443	49794	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.614895105 CET	49799	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.614933014 CET	443	49799	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.615031004 CET	49799	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.615155935 CET	49799	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.615174055 CET	443	49799	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.687021017 CET	443	49795	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.687096119 CET	443	49795	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.687141895 CET	49795	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.687406063 CET	49795	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.687412977 CET	443	49795	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.687423944 CET	49795	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.687429905 CET	443	49795	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.690613031 CET	49800	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.690653086 CET	443	49800	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.690721035 CET	49800	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.690875053 CET	49800	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.690885067 CET	443	49800	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.820513964 CET	443	49796	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.820599079 CET	443	49796	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.820663929 CET	49796	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.820878983 CET	49796	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.820928097 CET	443	49796	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.820960045 CET	49796	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.820981979 CET	443	49796	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.824233055 CET	49801	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.824276924 CET	443	49801	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.824394941 CET	49801	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.824568033 CET	49801	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.824579954 CET	443	49801	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.899985075 CET	443	49797	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.900579929 CET	49797	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.900595903 CET	443	49797	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:41.901063919 CET	49797	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:41.901071072 CET	443	49797	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:42.351207972 CET	443	49797	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:42.351284027 CET	443	49797	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:42.351366043 CET	49797	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:42.351679087 CET	49797	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:42.351701021 CET	443	49797	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:42.351713896 CET	49797	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:42.351721048 CET	443	49797	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:42.355268002 CET	49802	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:42.355329037 CET	443	49802	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:42.355403900 CET	49802	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:42.355611086 CET	49802	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:42.355626106 CET	443	49802	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.017575979 CET	443	49798	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.018630981 CET	49798	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.018662930 CET	443	49798	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.019186020 CET	49798	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.019207954 CET	443	49798	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.434010983 CET	443	49777	172.217.21.36	192.168.2.4
Nov 25, 2024 15:34:43.434089899 CET	443	49777	172.217.21.36	192.168.2.4
Nov 25, 2024 15:34:43.434308052 CET	49777	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:34:43.443075895 CET	443	49799	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.445326090 CET	49799	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.445343971 CET	443	49799	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.446050882 CET	49799	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.446058035 CET	443	49799	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.464654922 CET	443	49798	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.464731932 CET	443	49798	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.464804888 CET	49798	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.465306044 CET	49798	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.465327978 CET	443	49798	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.465363979 CET	49798	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.465369940 CET	443	49798	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.468961000 CET	49803	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.469014883 CET	443	49803	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.469072104 CET	49803	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.469269991 CET	49803	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.469285965 CET	443	49803	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.502222061 CET	443	49800	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.502845049 CET	49800	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.502875090 CET	443	49800	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.503325939 CET	49800	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.503330946 CET	443	49800	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.546195030 CET	443	49801	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.546742916 CET	49801	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.546767950 CET	443	49801	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.547240019 CET	49801	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.547249079 CET	443	49801	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.888607025 CET	443	49799	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.888678074 CET	443	49799	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.888811111 CET	49799	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.888978958 CET	49799	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.888978958 CET	49799	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.888999939 CET	443	49799	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.889009953 CET	443	49799	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.892365932 CET	49804	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.892421007 CET	443	49804	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.892594099 CET	49804	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.892832041 CET	49804	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.892844915 CET	443	49804	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.950130939 CET	443	49800	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.950268030 CET	443	49800	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.950336933 CET	49800	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.950483084 CET	49800	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.950483084 CET	49800	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.950503111 CET	443	49800	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.950514078 CET	443	49800	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.953387022 CET	49805	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.953428984 CET	443	49805	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.953560114 CET	49805	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.953743935 CET	49805	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.953761101 CET	443	49805	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.983459949 CET	443	49801	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.983666897 CET	443	49801	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.983736992 CET	49801	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.983803988 CET	49801	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.983820915 CET	443	49801	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.983839035 CET	49801	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.983844042 CET	443	49801	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.986681938 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.986725092 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:43.986804008 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.987071991 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:43.987086058 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:44.148921013 CET	443	49802	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:44.149713993 CET	49802	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:44.149749041 CET	443	49802	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:44.150242090 CET	49802	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:44.150248051 CET	443	49802	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:44.583466053 CET	49777	443	192.168.2.4	172.217.21.36
Nov 25, 2024 15:34:44.583493948 CET	443	49777	172.217.21.36	192.168.2.4
Nov 25, 2024 15:34:44.835530043 CET	443	49802	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:44.835597992 CET	443	49802	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:44.835846901 CET	49802	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:44.836441040 CET	49802	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:44.836462021 CET	443	49802	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:44.836596012 CET	49802	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:44.836601973 CET	443	49802	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:44.839739084 CET	49807	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:44.839770079 CET	443	49807	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:44.839885950 CET	49807	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:44.840168953 CET	49807	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:44.840176105 CET	443	49807	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.362715960 CET	443	49803	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.368936062 CET	49803	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.368973970 CET	443	49803	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.369667053 CET	49803	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.369674921 CET	443	49803	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.704097033 CET	443	49804	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.704713106 CET	49804	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.704746008 CET	443	49804	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.705570936 CET	49804	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.705578089 CET	443	49804	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.808372021 CET	443	49803	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.808543921 CET	443	49803	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.808615923 CET	49803	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.808793068 CET	49803	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.808811903 CET	443	49803	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.808826923 CET	49803	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.808832884 CET	443	49803	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.812144995 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.812181950 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.812274933 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.812449932 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.812458992 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.824986935 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.825606108 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.825640917 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.826379061 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.826390028 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.845632076 CET	443	49805	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.846108913 CET	49805	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.846141100 CET	443	49805	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:45.846600056 CET	49805	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:45.846612930 CET	443	49805	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.152750969 CET	443	49804	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.152925014 CET	443	49804	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.153225899 CET	49804	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.153225899 CET	49804	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.154021025 CET	49804	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.154042959 CET	443	49804	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.156795025 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.156840086 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.156970978 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.157118082 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.157130957 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.278460026 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.278529882 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.279016018 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.279016018 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.279334068 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.279350996 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.282247066 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.282288074 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.282743931 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.282743931 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.282774925 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.300614119 CET	443	49805	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.300688028 CET	443	49805	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.300843000 CET	49805	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.301043034 CET	49805	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.301043034 CET	49805	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.301069975 CET	443	49805	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.301083088 CET	443	49805	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.304137945 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.304184914 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.304454088 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.304454088 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.304486036 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.563230991 CET	443	49807	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.563976049 CET	49807	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.564009905 CET	443	49807	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.567086935 CET	49807	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.567107916 CET	443	49807	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.998512030 CET	443	49807	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.998581886 CET	443	49807	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.998631954 CET	49807	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.998934984 CET	49807	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.998934984 CET	49807	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:46.998965979 CET	443	49807	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:46.998976946 CET	443	49807	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:47.002173901 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:47.002214909 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:47.002289057 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:47.002569914 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:47.002589941 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:47.537990093 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:47.538611889 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:47.538634062 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 15:34:47.539279938 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 15:34:47.539294004 CET	443	49808	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 15:33:28.129497051 CET	53	52549	1.1.1.1	192.168.2.4
Nov 25, 2024 15:33:28.202892065 CET	53	52550	1.1.1.1	192.168.2.4
Nov 25, 2024 15:33:30.624849081 CET	52707	53	192.168.2.4	1.1.1.1
Nov 25, 2024 15:33:30.628362894 CET	55617	53	192.168.2.4	1.1.1.1
Nov 25, 2024 15:33:31.094670057 CET	53	65383	1.1.1.1	192.168.2.4
Nov 25, 2024 15:33:31.176763058 CET	53	52707	1.1.1.1	192.168.2.4
Nov 25, 2024 15:33:31.177113056 CET	53	55617	1.1.1.1	192.168.2.4
Nov 25, 2024 15:33:31.907388926 CET	64606	53	192.168.2.4	1.1.1.1
Nov 25, 2024 15:33:31.907560110 CET	51768	53	192.168.2.4	1.1.1.1
Nov 25, 2024 15:33:32.045540094 CET	53	64606	1.1.1.1	192.168.2.4
Nov 25, 2024 15:33:32.045588017 CET	53	51768	1.1.1.1	192.168.2.4
Nov 25, 2024 15:33:38.154908895 CET	138	138	192.168.2.4	192.168.2.255
Nov 25, 2024 15:33:48.047068119 CET	53	50803	1.1.1.1	192.168.2.4
Nov 25, 2024 15:34:06.938932896 CET	53	57065	1.1.1.1	192.168.2.4
Nov 25, 2024 15:34:28.100287914 CET	53	56466	1.1.1.1	192.168.2.4
Nov 25, 2024 15:34:29.643188953 CET	53	63261	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 15:33:30.624849081 CET	192.168.2.4	1.1.1.1	0xc28d	Standard query (0)	loaksandtheir.info	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:30.628362894 CET	192.168.2.4	1.1.1.1	0xfc35	Standard query (0)	loaksandtheir.info	65	IN (0x0001)	false
Nov 25, 2024 15:33:31.907388926 CET	192.168.2.4	1.1.1.1	0x3801	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:31.907560110 CET	192.168.2.4	1.1.1.1	0x514f	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 15:33:31.176763058 CET	1.1.1.1	192.168.2.4	0xc28d	No error (0)	loaksandtheir.info	108.158.75.96	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:31.176763058 CET	1.1.1.1	192.168.2.4	0xc28d	No error (0)	loaksandtheir.info	108.158.75.42	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:31.176763058 CET	1.1.1.1	192.168.2.4	0xc28d	No error (0)	loaksandtheir.info	108.158.75.7	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:31.176763058 CET	1.1.1.1	192.168.2.4	0xc28d	No error (0)	loaksandtheir.info	108.158.75.27	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:32.045540094 CET	1.1.1.1	192.168.2.4	0x3801	No error (0)	www.google.com	172.217.21.36	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:32.045588017 CET	1.1.1.1	192.168.2.4	0x514f	No error (0)	www.google.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

loaksandtheir.info

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	108.158.75.96	80	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:33:31.314151049 CET	433	OUT	GET / HTTP/1.1 Host: loaksandtheir.info Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:33:33.042798996 CET	667	IN	HTTP/1.1 204 No Content Content-Type: text/plain Connection: keep-alive Date: Mon, 25 Nov 2024 14:33:32 GMT Accept-CH: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List Server: openresty/1.17.8.2 cache-control: no-store, no-cache, must-revalidate, no-transform Pragma: no-cache P3P: CP="NID DSP ALL COR" set-cookie: csu=ceffdf8c-b815-49ce-8e05-33d4063e6207 X-Cache: Miss from cloudfront Via: 1.1 e7575e0a4303776f28631da37e0447e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: Y70Eh2VDx5YPZC8rN4ybJbL08nS2cVirTeU40TjpBB5eyaEfvirZxA==
Nov 25, 2024 15:34:18.048723936 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:35 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 14:33:35 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=68396 Date: Mon, 25 Nov 2024 14:33:35 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:37 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 14:33:37 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=68372 Date: Mon, 25 Nov 2024 14:33:37 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 14:33:37 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:43 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XonzmWMYSBRDvVt&MD=Tuh4YFYA HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 14:33:43 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: af8986a9-4313-43d5-80ba-c807a5c18b8d MS-RequestId: a943387d-e5f8-49d1-9b1b-903f801b0d30 MS-CV: jG/O+xXKX0upkebA.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 14:33:43 GMT Connection: close Content-Length: 24490
2024-11-25 14:33:43 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 14:33:43 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:19 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:19 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:19 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: 19b35b80-c01e-0049-150a-3eac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143419Z-15b8b599d88tr2flhC1TEB5gk400000006800000000065c3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 14:34:19 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 14:34:19 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-25 14:34:19 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-25 14:34:20 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-25 14:34:20 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-25 14:34:20 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-25 14:34:20 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-25 14:34:20 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-25 14:34:20 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-25 14:34:20 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:22 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:23 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:22 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2eed8dc4-701e-0098-0dc6-3e395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143422Z-178bfbc474bvjk8shC1NYC83ns00000007c000000000hgyd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 14:34:23 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:22 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:22 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 070f5f04-601e-005c-0de2-3df06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143422Z-174c587ffdfdwxdvhC1TEB1c4n00000005x000000000qngk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:23 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:22 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:22 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: ef81d43b-c01e-008d-1898-3d2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143422Z-15b8b599d889gj5whC1TEBfyk000000005w000000000dtyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:23 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:22 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:22 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 15799d2c-401e-0047-13c9-3e8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143422Z-178bfbc474bp8mkvhC1NYCzqnn00000007f00000000099mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:23 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:22 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:23 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 97edb58e-001e-00a2-13a4-3ed4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143423Z-178bfbc474bbcwv4hC1NYCypys00000007dg00000000er26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:23 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49755	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:23 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XonzmWMYSBRDvVt&MD=Tuh4YFYA HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 14:34:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: a9e394c7-a1ce-4aef-bbc5-fc1c40857a34 MS-RequestId: d9583c80-11cf-4468-8805-b65ac807486f MS-CV: dIyKLjzup0mPZnyl.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 14:34:22 GMT Connection: close Content-Length: 30005
2024-11-25 14:34:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-25 14:34:24 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:24 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143425Z-174c587ffdf89smkhC1TEB697s000000068000000000017h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:24 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 30601852-401e-0047-7476-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143425Z-174c587ffdf9xbcchC1TEBxkz400000005zg000000005ph3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:24 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 65361fd5-201e-0033-283f-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143425Z-15b8b599d88s6mj9hC1TEBur3000000005tg00000000mqme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:25 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:25 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 975c85cf-001e-0017-4d20-3d0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143425Z-178bfbc474btrnf9hC1NYCb80g00000007tg000000007396 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:25 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:25 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:25 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ba9b913e-601e-0001-2f1a-3dfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143425Z-178bfbc474btvfdfhC1NYCa2en00000007s0000000003m66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:25 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:27 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 239436ba-d01e-0028-7bd5-3b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143427Z-15b8b599d88z9sc7hC1TEBkr4w000000065g00000000dzde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:27 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 922c5f4e-601e-005c-577c-3bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143427Z-174c587ffdftv9hphC1TEBm29w00000006200000000049z0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:27 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 3744ce68-601e-00ab-2603-3d66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143427Z-178bfbc474bvjk8shC1NYC83ns00000007b000000000mntd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:28 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:27 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30a29eaf-701e-001e-220f-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143428Z-178bfbc474bwh9gmhC1NYCy3rs00000007m000000000k1r4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:27 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: aff2abcc-f01e-0003-4547-3c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143427Z-178bfbc474bpnd5vhC1NYC4vr400000007gg00000000k4z7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:28 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:29 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143429Z-174c587ffdf8fcgwhC1TEBnn70000000068g0000000088bk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:29 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: ba5d631a-801e-0047-14d1-3e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143430Z-178bfbc474bpnd5vhC1NYC4vr400000007hg00000000fsny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:29 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4834b854-301e-005d-3ab8-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143430Z-178bfbc474btvfdfhC1NYCa2en00000007rg000000005wcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:29 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:30 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: d05e48d4-001e-0065-1c06-3d0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143430Z-178bfbc474b9xljthC1NYCtw9400000007h0000000009z0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:30 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:30 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e328efd5-c01e-00a2-56bf-3e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143430Z-178bfbc474brk967hC1NYCfu6000000007a000000000ky9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:30 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:31 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ca5e5154-001e-0014-4e4e-3c5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143432Z-15b8b599d88vp97chC1TEB5pzw0000000650000000000c74 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:31 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 40d9340c-a01e-0050-06b8-3edb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143432Z-178bfbc474bnwsh4hC1NYC2ubs00000007r0000000007ka6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:32 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:32 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143432Z-178bfbc474bmqmgjhC1NYCy16c00000007q000000000afy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:32 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:32 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143432Z-174c587ffdfmrvb9hC1TEBtn38000000065g000000000n1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:32 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:32 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 876ff6fa-901e-00a0-47eb-3d6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143432Z-178bfbc474bxkclvhC1NYC69g400000007eg00000000ghwu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:33 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:34 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:34 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: aaf2b452-f01e-0071-621c-3e431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143434Z-178bfbc474bvjk8shC1NYC83ns00000007eg00000000b3sf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:34 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:34 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 87817176-601e-003e-034d-3c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143434Z-15b8b599d8885prmhC1TEBsnkw000000062g00000000ngky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:34 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 12cef178-a01e-0070-7e6c-3d573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143434Z-174c587ffdf8lw6dhC1TEBkgs80000000630000000009z8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:34 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: a8d62205-901e-0083-0c0e-3bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143434Z-174c587ffdfp4vpjhC1TEBybqw000000061000000000gqe4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:34 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: ea8695b1-901e-002a-7283-3b7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143435Z-174c587ffdfcj798hC1TEB9bq4000000063g00000000u1d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:36 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:36 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 2160d4c7-701e-0021-5913-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143436Z-178bfbc474bv7whqhC1NYC1fg400000007n0000000009dkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:36 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:36 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 413a5bf0-401e-0035-1ab5-3e82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143436Z-178bfbc474bp8mkvhC1NYCzqnn00000007c000000000k3bt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:36 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c86812d3-d01e-005a-35c0-3e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143437Z-178bfbc474brk967hC1NYCfu6000000007cg00000000ccvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:36 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:37 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 444cb209-801e-00a0-5ef6-3d2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143437Z-178bfbc474bnwsh4hC1NYC2ubs00000007kg00000000kdnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:37 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:37 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:37 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: d83ea369-501e-000a-040c-3d0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143437Z-178bfbc474bmqmgjhC1NYCy16c00000007qg000000008mn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:37 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:38 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:38 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 9f194ed4-601e-0070-357c-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143438Z-174c587ffdfb5q56hC1TEB04kg000000062g000000002q8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:38 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:38 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 6056d4b9-d01e-002b-71bf-3e25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143439Z-178bfbc474bxkclvhC1NYC69g400000007k0000000008bxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:39 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:38 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 414c800a-401e-0035-7cbf-3e82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143439Z-178bfbc474bv587zhC1NYCny5w00000007h0000000005e9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:39 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:39 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bdb50d09-801e-0048-2c0e-3ef3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143439Z-178bfbc474bw8bwphC1NYC38b400000007eg000000009kqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:39 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:39 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:39 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143439Z-174c587ffdfx984chC1TEB676g000000062000000000d4be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:40 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:40 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:41 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 97f3364e-001e-00a2-6ca6-3ed4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143441Z-178bfbc474bnwsh4hC1NYC2ubs00000007t0000000000747 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:41 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:41 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:41 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 974535d3-001e-002b-30bf-3e99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143441Z-178bfbc474bgvl54hC1NYCsfuw00000007n0000000007ngc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:41 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:41 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:41 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 8a9c0054-c01e-0046-231b-3e2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143441Z-178bfbc474bp8mkvhC1NYCzqnn00000007cg00000000ffz1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:41 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:41 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:41 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9a08bc20-501e-00a0-39ae-3e9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143441Z-178bfbc474b9xljthC1NYCtw9400000007hg000000008dek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:41 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:41 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:42 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 15b7cf09-401e-0047-4de4-3e8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143442Z-174c587ffdfmlsmvhC1TEBvyks000000067000000000d55p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:42 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:43 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:43 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fcdc764c-f01e-0052-4963-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143443Z-178bfbc474bnwsh4hC1NYC2ubs00000007t0000000000789 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:43 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:43 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:43 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143443Z-174c587ffdfx984chC1TEB676g000000061000000000fm8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:43 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:43 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 732016c8-001e-000b-7fb8-3e15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143443Z-178bfbc474brk967hC1NYCfu6000000007a000000000kz7c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:43 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 3074f9d5-701e-001e-47fc-3df5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143443Z-178bfbc474bq2pr7hC1NYCkfgg00000007ng00000000kw8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:44 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: f323d95e-101e-0065-6a6f-3d4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143444Z-15b8b599d88qw29phC1TEB5zag000000063g0000000066q1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:45 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c8271f5e-801e-008c-7000-3f7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143445Z-174c587ffdfdwxdvhC1TEB1c4n000000061g000000006zk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:45 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 4a2b4f75-b01e-0084-04e2-3dd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143445Z-174c587ffdfmlsmvhC1TEBvyks000000064g00000000pc9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:45 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: ba3f3383-a01e-000d-6e55-3cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143446Z-15b8b599d88s6mj9hC1TEBur3000000005t000000000nqbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:45 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 08e3daf0-d01e-002b-25fd-3e25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143446Z-15b8b599d88z9sc7hC1TEBkr4w000000065g00000000e0nn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:46 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6b17e566-f01e-003f-7a44-3cd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143446Z-15b8b599d88phfhnhC1TEBr51n000000066g00000000awgh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:47 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:47 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: c63dd3a8-001e-0017-61d8-3d0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143447Z-178bfbc474bbcwv4hC1NYCypys00000007f000000000afsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:47 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:48 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:48 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: d5269c75-c01e-0066-3ae4-3ea1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143448Z-174c587ffdfn4nhwhC1TEB2nbc000000063g00000000k4vz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:48 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:48 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:48 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: db5fa324-001e-00ad-2244-3c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143448Z-15b8b599d88l2dpthC1TEBmzr0000000062g000000006td9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:48 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:48 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 19559c36-501e-005b-23d0-3ed7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143448Z-15b8b599d882zv28hC1TEBdchn00000005y000000000e0nr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 14:34:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:48 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:49 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c229ce53-501e-008f-23c3-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143449Z-15b8b599d889gj5whC1TEBfyk000000005x000000000az0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:49 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2368, Parent PID: 1148

General

Target ID:	0
Start time:	09:33:21
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4916, Parent PID: 2368

General

Target ID:	2
Start time:	09:33:25
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1976,i,387968193575612774,13619486285972469231,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6328, Parent PID: 1148

General

Target ID:	3
Start time:	09:33:29
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://loaksandtheir.info"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://loaksandtheir.info

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2368, Parent PID: 1148

General

Chronological Activities

Analysis Process: chrome.exePID: 4916, Parent PID: 2368

General

Chronological Activities

Analysis Process: chrome.exePID: 6328, Parent PID: 1148

General

Chronological Activities

Disassembly

Windows Analysis Report
http://loaksandtheir.info