Edit tour

Windows Analysis Report
https://www.cvmaker.com/assets/images/email/logo_@2x.png

Overview

General Information

Sample URL:	https://www.cvmaker.com/assets/images/email/logo_@2x.png
Analysis ID:	1571437
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1940,i,14329063300565001641,10079965374436085301,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3176 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.cvmaker.com/assets/images/email/logo_@2x.png" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=Q4mzT4I9mSQXM%2Fzi3clbGi4D1nmsxESVIyUGB%2Bee8abecDBN3fOh2n7ql%2FTZjEAR%2BfzO56fp2QCy2ArSk2kjXmGE8kB5RJpU%2FsYghAhljSYAZ9379qa72v9mz7MmcHRFAA%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 452Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 10:35:50 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingretry-after: 28800Cache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q4mzT4I9mSQXM%2Fzi3clbGi4D1nmsxESVIyUGB%2Bee8abecDBN3fOh2n7ql%2FTZjEAR%2BfzO56fp2QCy2ArSk2kjXmGE8kB5RJpU%2FsYghAhljSYAZ9379qa72v9mz7MmcHRFAA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ef459c9a8fe0fa7-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1484&min_rtt=1480&rtt_var=564&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1196&delivery_rate=1926121&cwnd=220&unsent_bytes=0&cid=ec670ff7cbd0234b&ts=1130&x=0"

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 88.221.168.226:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 88.221.168.226:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49809 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/10@6/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1940,i,14329063300565001641,10079965374436085301,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.cvmaker.com/assets/images/email/logo_@2x.png"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1940,i,14329063300565001641,10079965374436085301,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.cvmaker.com/assets/images/email/logo_@2x.png	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://www.cvmaker.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.cvmaker.com	172.67.69.175	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
www.google.com	142.250.181.68	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=Q4mzT4I9mSQXM%2Fzi3clbGi4D1nmsxESVIyUGB%2Bee8abecDBN3fOh2n7ql%2FTZjEAR%2BfzO56fp2QCy2ArSk2kjXmGE8kB5RJpU%2FsYghAhljSYAZ9379qa72v9mz7MmcHRFAA%3D%3D	false		high
https://www.cvmaker.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.cvmaker.com/assets/images/email/logo_@2x.png	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.69.175	www.cvmaker.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1571437
Start date and time:	2024-12-09 11:34:49 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.cvmaker.com/assets/images/email/logo_@2x.png
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/10@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.208.227, 172.217.19.238, 64.233.162.84, 172.217.17.46, 217.20.58.98, 192.229.221.95, 172.217.17.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.cvmaker.com/assets/images/email/logo_@2x.png

Input	Output
URL: https://www.cvmaker.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.cvmaker.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 09:35:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9815779740524837
Encrypted:	false
SSDEEP:	48:86dKT2OyHh/UidAKZdA19ehwiZUklqehBy+3:8zvkquy
MD5:	27DEE8B476F0963DAFEDD11C8854EC65
SHA1:	C114A69267343855C5B4AFA0AC4B7BAABC272848
SHA-256:	033F029C7523C79847233D2DE139DABB64BDA1CC4677A54B99F55D7DD5E7D1D0
SHA-512:	0BD5B7AD3ED923D6EDB5F63B5A7B97D445B037ECF85B7B4E764FC301B5B48BDC69015D439431E69A9F18E222F1205B0D054CC2445C070C93F674C7D622D36155
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......@.&J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YuT....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YuT....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YuT....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YuT..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YwT...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 09:35:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.995788114778365
Encrypted:	false
SSDEEP:	48:80XdKT2OyHh/UidAKZdA1weh/iZUkAQkqehey+2:8Vvkg9QHy
MD5:	BD9A7F396AE0B423EAE26E8D43B6961A
SHA1:	207C21C23514232C2A5AA7F83E11FD17ABB15D8B
SHA-256:	B581E8047136F0D00B2EA3CCB8D7BE95EA8D105EC70F89DF79C2674351D00663
SHA-512:	7D096F669C1F5C86A31A5C85F00034B1BFDA688E6F94C15E31922C59B79747E6B7A27BE6E42D89C432683EBABDA94B464EA29739D50E8E6C86F17D57810256B6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v7.&J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YuT....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YuT....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YuT....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YuT..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YwT...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007340870153114
Encrypted:	false
SSDEEP:	48:8xndKT2OsHh/UidAKZdA14tseh7sFiZUkmgqeh7sEy+BX:8xMvq4nCy
MD5:	C7CEB27FDE008760889EB703D90CD18C
SHA1:	4C642368165E42A54E6D2443C638DECE046B9C35
SHA-256:	36108ADD4E3865E792EA2B3A468BAB40EE4FA8A9173E440456E0305033FE7A79
SHA-512:	15D4B1AE3645420132E38F3ED358931B679A2E97CC567F9D1260C20641346E2F6E14EFCCF90CD04638E9EFDD6EF85D38F367918ED739BE0517726B901E35EF32
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YuT....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YuT....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YuT....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YuT..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 09:35:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9936962026875724
Encrypted:	false
SSDEEP:	48:8/dKT2OyHh/UidAKZdA1vehDiZUkwqeh6y+R:8Uvkrcy
MD5:	7969FF04FBFC1B1525FE14B90CCDC740
SHA1:	6EB712B726ED280BC0F06570AC69A37F74F4928E
SHA-256:	E6932970E3027309783BC0D7D17D3D4B12DB50415173D62A959CBB6E30366F45
SHA-512:	EB940C10404C61F6BB5D1D7FC02E1F84BAA659CF28BC8658DC627FD9E9FC1B5A41EBBC5587E5FE7FFEC00C07D34ADBC773B1DF1A2DD881F05285BA9E0C3CB449
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....2.&J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YuT....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YuT....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YuT....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YuT..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YwT...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 09:35:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9832861124054286
Encrypted:	false
SSDEEP:	48:8tfdKT2OyHh/UidAKZdA1hehBiZUk1W1qehYy+C:8t0vkr94y
MD5:	3FBD33C30DB8F4AD0C49350F5E61B58F
SHA1:	595DA964C230932133091B4C2B670A83793D66FF
SHA-256:	60CB37954D40FCCEBB1589B542E315FB396B5CA5A1EE2957A142A92A15982778
SHA-512:	557350B9F785D08F2365FB0770400DD76F192DD0CE5E4A56BCAC0B59AAFD7BF6E16DCA12F2B946435962C5CF775437E92FDC3D0D3440A6CDF74F2DCF43426EF5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....8;<.&J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YuT....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YuT....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YuT....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YuT..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YwT...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 09:35:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.990302381726593
Encrypted:	false
SSDEEP:	48:8TdKT2OyHh/UidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbCy+yT+:8YvkLT/TbxWOvTbCy7T
MD5:	0455135E021263DA0E2BE3AA45BFD6A9
SHA1:	55A17760B7C414988B465EFC64ACCDCD954A61D0
SHA-256:	82E67D278E2D219C4E2C1755EF9BE77C375213E621171CF7429B0509754CE13C
SHA-512:	9402A7EF22E804F3948A19115C7FE2AB4EE0BF8432FA35B60B0F86C1DB4C5CDB783FC790DD82EAD636855AA9FCC1A8ED457D9EED96107593DEEECDF2C967F05A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....().&J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YuT....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YuT....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YuT....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YuT..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YwT...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4894
Entropy (8bit):	7.915523152502384
Encrypted:	false
SSDEEP:	96:PSYa2ktsnTIBewS2DXwaGiHAUkWXq7rWrQ4JOMyuuv7DNbD1HPSvCO:62W48JAa5VarWrTJ4uujBbUvD
MD5:	562A8A51BAD7C2B7F4976F959EB60DE3
SHA1:	1913304DF61A1251E112A9E2B0BB7C50E34967C2
SHA-256:	32A3CF42298B1FCCCA9875FB652EEB239B31B1BC2E0CED957F65BCC3EC891DF1
SHA-512:	471D83066AE3CC2C15FFE86433E54F2B87357F11E9E2976F8D39C60EC3622AB1D6B48D95D53B5AB20F2461CEF464B1812A0A333ACDA24F2777868F82A7B7FB1F
Malicious:	false
Reputation:	low
URL:	https://www.cvmaker.com/assets/images/email/logo_@2x.png
Preview:	.PNG........IHDR...@...<.......c.....sBIT....\|.d.....IDATx..y.]..?.$B.U.PS.mUq.1TS.T...R.....\......J.!..&..&!MW.......h..{.x./~99.......y.....{......a..BEEE.H.&..u..H...TT,.l.l.YK..hJ..+.,......T......R9....>K..+.,......T......R9....>K..+.,......T.......,A...$.:..;.y.....[f..tV.G.........<..cf...cU......s.7..+.d3._TON[......V!.6W.f....$vM5...a..Nr......J..L.^N^....{.4..........v......v.....X:....&...w...:..>.....f...ms.\|.....h>....^.I...^9.O4.{....8...X..._..z....0...;.!\.=....xC.m..fv.^.9lX...l..>Kp\|y...L....cf....H:.X..e....o...p..[9...IS...(3{.a[...s6.of......X...V.Q.~"..g..F...j....>r.;......k....Q....O..]Y..N.{.#..I.2..B.-..G."i.......m$./..H.i.!.l..s4.~...t0..cx..{.!._IOF....I;z?[...C.#u}?'ijV'.1.$..lfHj8....S....\.......S.i.X.x...z..N.+N....h`.I:...=.%i...D.i.+....P...R.(imI3#>.....I.G.n...s~F...D.~_.4;O.....%]...\|...r.:....S...n...4..5...tG!i.`..f..6....e..#..J.....I.t..D.i..\.L..~...Fa.p+....C@.CZRM.e.........H:.d..!..

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://www.cvmaker.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 11:35:36.835038900 CET	49674	443	192.168.2.5	23.1.237.91
Dec 9, 2024 11:35:36.835042953 CET	49675	443	192.168.2.5	23.1.237.91
Dec 9, 2024 11:35:36.944432020 CET	49673	443	192.168.2.5	23.1.237.91
Dec 9, 2024 11:35:46.444813013 CET	49674	443	192.168.2.5	23.1.237.91
Dec 9, 2024 11:35:46.444895029 CET	49675	443	192.168.2.5	23.1.237.91
Dec 9, 2024 11:35:46.554187059 CET	49673	443	192.168.2.5	23.1.237.91
Dec 9, 2024 11:35:47.632541895 CET	49711	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:35:47.632575989 CET	443	49711	142.250.181.68	192.168.2.5
Dec 9, 2024 11:35:47.632757902 CET	49711	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:35:47.632879972 CET	49711	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:35:47.632886887 CET	443	49711	142.250.181.68	192.168.2.5
Dec 9, 2024 11:35:47.864777088 CET	49712	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:47.864810944 CET	443	49712	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:47.864890099 CET	49712	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:47.867110014 CET	49712	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:47.867125988 CET	443	49712	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:48.774554968 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:48.774616003 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:48.775175095 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:48.775213957 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:48.775248051 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:48.775507927 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:48.775655031 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:48.775667906 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:48.775943041 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:48.775954962 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:48.935815096 CET	443	49703	23.1.237.91	192.168.2.5
Dec 9, 2024 11:35:48.935946941 CET	49703	443	192.168.2.5	23.1.237.91
Dec 9, 2024 11:35:49.314771891 CET	443	49712	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:49.314903021 CET	49712	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:49.323525906 CET	49712	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:49.323545933 CET	443	49712	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:49.323797941 CET	443	49712	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:49.325315952 CET	443	49711	142.250.181.68	192.168.2.5
Dec 9, 2024 11:35:49.335194111 CET	49711	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:35:49.335205078 CET	443	49711	142.250.181.68	192.168.2.5
Dec 9, 2024 11:35:49.336322069 CET	443	49711	142.250.181.68	192.168.2.5
Dec 9, 2024 11:35:49.336523056 CET	49711	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:35:49.347086906 CET	49711	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:35:49.347194910 CET	443	49711	142.250.181.68	192.168.2.5
Dec 9, 2024 11:35:49.366995096 CET	49712	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:49.372631073 CET	49712	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:49.397416115 CET	49711	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:35:49.397428989 CET	443	49711	142.250.181.68	192.168.2.5
Dec 9, 2024 11:35:49.419341087 CET	443	49712	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:49.446239948 CET	49711	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:35:49.997277975 CET	443	49712	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:49.997351885 CET	443	49712	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:49.997420073 CET	49712	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:49.997517109 CET	49712	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:49.997543097 CET	443	49712	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:50.007720947 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.008378983 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.008619070 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.008642912 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.008933067 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.008944035 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.009651899 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.009712934 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.009915113 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.009969950 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.011456966 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.011518955 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.011607885 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.011624098 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.011750937 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.011817932 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.031778097 CET	49715	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:50.031821012 CET	443	49715	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:50.031879902 CET	49715	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:50.032207966 CET	49715	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:50.032223940 CET	443	49715	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:50.057101011 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.057110071 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.057143927 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.104271889 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.447197914 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.447246075 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.447278023 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.447293043 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.447318077 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.447360039 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.447376966 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.447384119 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.447418928 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.447439909 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.447487116 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.470289946 CET	49713	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.470313072 CET	443	49713	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:50.507564068 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:50.555322886 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:51.115443945 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:51.115586042 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:51.115855932 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:51.118999958 CET	49714	443	192.168.2.5	172.67.69.175
Dec 9, 2024 11:35:51.119021893 CET	443	49714	172.67.69.175	192.168.2.5
Dec 9, 2024 11:35:51.258227110 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:51.258266926 CET	443	49716	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:51.258405924 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:51.260622978 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:51.260633945 CET	443	49716	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:51.477003098 CET	443	49715	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:51.477210999 CET	49715	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:51.478575945 CET	49715	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:51.478588104 CET	443	49715	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:51.478831053 CET	443	49715	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:51.481703997 CET	49715	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:51.523346901 CET	443	49715	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:52.026845932 CET	443	49715	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:52.026921034 CET	443	49715	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:52.026973963 CET	49715	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:52.027872086 CET	49715	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:52.027894974 CET	443	49715	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:52.027906895 CET	49715	443	192.168.2.5	88.221.168.226
Dec 9, 2024 11:35:52.027914047 CET	443	49715	88.221.168.226	192.168.2.5
Dec 9, 2024 11:35:52.475703001 CET	443	49716	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:52.476099968 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.476109028 CET	443	49716	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:52.477106094 CET	443	49716	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:52.477174044 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.478296995 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.478354931 CET	443	49716	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:52.478535891 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.478542089 CET	443	49716	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:52.523184061 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.930434942 CET	443	49716	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:52.930519104 CET	443	49716	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:52.930821896 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.930835009 CET	443	49716	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:52.930854082 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.930883884 CET	49716	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.931559086 CET	49718	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.931586027 CET	443	49718	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:52.932655096 CET	49718	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.932892084 CET	49718	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:52.932904005 CET	443	49718	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:54.141838074 CET	443	49718	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:54.142134905 CET	49718	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:54.142149925 CET	443	49718	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:54.142509937 CET	443	49718	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:54.142818928 CET	49718	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:54.142880917 CET	443	49718	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:54.142956018 CET	49718	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:54.187339067 CET	443	49718	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:54.601950884 CET	443	49718	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:54.602026939 CET	443	49718	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:54.602088928 CET	49718	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:54.602305889 CET	49718	443	192.168.2.5	35.190.80.1
Dec 9, 2024 11:35:54.602320910 CET	443	49718	35.190.80.1	192.168.2.5
Dec 9, 2024 11:35:57.074686050 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:35:57.074712038 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:35:57.074780941 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:35:57.076067924 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:35:57.076081991 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:35:58.707710028 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:35:58.707796097 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:35:58.710028887 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:35:58.710041046 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:35:58.710289955 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:35:58.758832932 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:35:58.989327908 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:35:58.989356995 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:35:58.989428997 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:35:58.989798069 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:35:58.989811897 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:35:59.017541885 CET	443	49711	142.250.181.68	192.168.2.5
Dec 9, 2024 11:35:59.017620087 CET	443	49711	142.250.181.68	192.168.2.5
Dec 9, 2024 11:35:59.017755985 CET	49711	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:35:59.442080975 CET	49711	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:35:59.442127943 CET	443	49711	142.250.181.68	192.168.2.5
Dec 9, 2024 11:36:00.216056108 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:00.259339094 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.714070082 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:00.714344025 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:00.716798067 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:00.716809988 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:00.717050076 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:00.725035906 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:00.757112980 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.757133961 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.757142067 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.757150888 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.757169962 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.757250071 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:00.757250071 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:00.757267952 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.757352114 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:00.767338991 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:00.776299000 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.776376009 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:00.776386976 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.776396990 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.776460886 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:00.776519060 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:00.776535034 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:00.776556015 CET	49719	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:00.776562929 CET	443	49719	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:01.193118095 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.193142891 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.193166971 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.193207979 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.193223953 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.193236113 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.193272114 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.371830940 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.371853113 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.371907949 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.371923923 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.371948004 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.371973991 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.416362047 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.416385889 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.416450977 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.416460037 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.416521072 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.416521072 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.546427011 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.546447992 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.546539068 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.546539068 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.546551943 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.546622992 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.587236881 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.587255001 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.587338924 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.587354898 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.587431908 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.603230000 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.603247881 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.603318930 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.603342056 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.603492975 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.624335051 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.624357939 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.624449968 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.624459982 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.624530077 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.733593941 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.733619928 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.733716011 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.733736038 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.733761072 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.733887911 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.749963999 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.749984980 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.750042915 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.750051975 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.750140905 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.764643908 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.764666080 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.764745951 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.764755011 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.764853954 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.780225992 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.780247927 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.780347109 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.780358076 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.780564070 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.793431044 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.793483973 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.795839071 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.796118975 CET	49722	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.796133041 CET	443	49722	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.828522921 CET	49724	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.828526020 CET	49725	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.828547955 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.828560114 CET	443	49725	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.828634977 CET	49724	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.828635931 CET	49725	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.829735994 CET	49726	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.829747915 CET	443	49726	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.830029964 CET	49724	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.830033064 CET	49725	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.830043077 CET	443	49725	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.830044985 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.830070972 CET	49726	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.830240011 CET	49726	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.830251932 CET	443	49726	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.831773043 CET	49727	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.831773043 CET	49728	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.831785917 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.831799030 CET	443	49728	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.832644939 CET	49727	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.832644939 CET	49728	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.832839012 CET	49728	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.832839012 CET	49727	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:01.832858086 CET	443	49728	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:01.832865953 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.606442928 CET	443	49725	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.607027054 CET	49725	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:03.607044935 CET	443	49725	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.607490063 CET	49725	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:03.607496023 CET	443	49725	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.607835054 CET	443	49726	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.608094931 CET	49726	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:03.608124018 CET	443	49726	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.608437061 CET	49726	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:03.608447075 CET	443	49726	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.608623981 CET	443	49728	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.608706951 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.608891964 CET	49728	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:03.608906984 CET	443	49728	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.609040976 CET	49724	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:03.609047890 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.609345913 CET	49728	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:03.609354019 CET	443	49728	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.609422922 CET	49724	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:03.609426975 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.609756947 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.610027075 CET	49727	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:03.610033989 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:03.610348940 CET	49727	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:03.610353947 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.039520025 CET	443	49725	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.039591074 CET	443	49725	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.039647102 CET	49725	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.039911985 CET	49725	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.039935112 CET	443	49725	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.039948940 CET	49725	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.039954901 CET	443	49725	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.041636944 CET	443	49726	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.041965961 CET	443	49726	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.042027950 CET	49726	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.042052984 CET	49726	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.042064905 CET	443	49726	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.042077065 CET	49726	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.042083025 CET	443	49726	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.043056965 CET	49730	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.043083906 CET	443	49730	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.043162107 CET	49730	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.043318987 CET	49730	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.043330908 CET	443	49730	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.044230938 CET	49731	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.044248104 CET	443	49731	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.044312954 CET	49731	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.044461012 CET	49731	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.044475079 CET	443	49731	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.047885895 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.047910929 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.047961950 CET	49724	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.047969103 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.047979116 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048017979 CET	49724	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.048178911 CET	49724	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.048183918 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048214912 CET	49724	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.048218966 CET	443	49724	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048523903 CET	443	49728	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048552036 CET	443	49728	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048589945 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048595905 CET	443	49728	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048599958 CET	49728	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.048614979 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048635960 CET	49728	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.048677921 CET	49727	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.048687935 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048726082 CET	49727	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.048835039 CET	49728	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.048841000 CET	443	49728	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048851013 CET	49728	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.048855066 CET	443	49728	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048882008 CET	49727	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.048886061 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.048902035 CET	49727	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.049012899 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.049043894 CET	443	49727	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.049087048 CET	49727	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.051183939 CET	49732	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.051208019 CET	443	49732	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.051274061 CET	49732	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.051341057 CET	49733	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.051362038 CET	443	49733	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.051405907 CET	49732	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.051419973 CET	443	49732	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.051424980 CET	49733	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.051568031 CET	49733	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.051588058 CET	443	49733	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.051943064 CET	49734	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.051949978 CET	443	49734	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:04.052011013 CET	49734	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.052109957 CET	49734	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:04.052118063 CET	443	49734	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.765222073 CET	443	49730	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.765803099 CET	49730	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:05.765829086 CET	443	49730	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.767512083 CET	49730	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:05.767517090 CET	443	49730	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.777529001 CET	443	49732	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.777545929 CET	443	49733	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.777553082 CET	443	49734	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.777878046 CET	49732	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:05.777892113 CET	443	49732	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.777988911 CET	49733	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:05.778007984 CET	443	49733	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.778341055 CET	49732	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:05.778347015 CET	443	49732	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.778449059 CET	49733	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:05.778455019 CET	443	49733	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.778681040 CET	49734	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:05.778692961 CET	443	49734	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.779084921 CET	49734	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:05.779088974 CET	443	49734	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.981735945 CET	443	49731	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.982254028 CET	49731	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:05.982299089 CET	443	49731	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:05.982748032 CET	49731	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:05.982754946 CET	443	49731	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.200520992 CET	443	49730	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.200606108 CET	443	49730	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.200768948 CET	49730	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.200911045 CET	49730	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.200933933 CET	443	49730	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.200948954 CET	49730	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.200954914 CET	443	49730	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.203907967 CET	49735	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.203954935 CET	443	49735	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.204049110 CET	49735	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.204226017 CET	49735	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.204243898 CET	443	49735	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.210536957 CET	443	49733	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.210602045 CET	443	49733	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.210652113 CET	49733	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.210772038 CET	49733	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.210783005 CET	443	49733	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.210793972 CET	49733	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.210798979 CET	443	49733	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.211412907 CET	443	49732	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.211471081 CET	443	49732	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.211517096 CET	49732	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.211642027 CET	49732	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.211653948 CET	443	49732	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.211667061 CET	49732	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.211673021 CET	443	49732	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.211822987 CET	443	49734	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.211891890 CET	443	49734	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.211937904 CET	49734	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.212022066 CET	49734	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.212027073 CET	443	49734	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.212068081 CET	49734	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.212071896 CET	443	49734	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.213691950 CET	49736	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.213716984 CET	443	49736	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.213793039 CET	49736	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.213916063 CET	49736	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.213928938 CET	443	49736	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.214132071 CET	49737	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.214163065 CET	443	49737	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.214224100 CET	49737	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.214351892 CET	49737	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.214366913 CET	443	49737	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.214657068 CET	49738	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.214663982 CET	443	49738	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.214725018 CET	49738	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.214843035 CET	49738	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.214852095 CET	443	49738	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.415967941 CET	443	49731	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.416033030 CET	443	49731	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.416095972 CET	49731	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.416271925 CET	49731	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.416287899 CET	443	49731	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.416331053 CET	49731	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.416337013 CET	443	49731	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.419647932 CET	49739	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.419692039 CET	443	49739	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:06.419780970 CET	49739	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.419948101 CET	49739	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:06.419964075 CET	443	49739	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:07.919608116 CET	443	49735	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:07.920346022 CET	49735	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:07.920375109 CET	443	49735	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:07.920845032 CET	49735	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:07.920850992 CET	443	49735	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:07.930444956 CET	443	49736	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:07.931242943 CET	49736	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:07.931261063 CET	443	49736	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:07.931664944 CET	49736	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:07.931670904 CET	443	49736	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:07.945086956 CET	443	49738	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:07.945440054 CET	49738	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:07.945453882 CET	443	49738	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:07.945774078 CET	49738	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:07.945777893 CET	443	49738	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.141463041 CET	443	49739	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.142028093 CET	49739	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.142050028 CET	443	49739	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.142471075 CET	49739	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.142476082 CET	443	49739	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.352757931 CET	443	49735	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.352829933 CET	443	49735	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.352926016 CET	49735	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.353065968 CET	49735	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.353087902 CET	443	49735	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.353100061 CET	49735	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.353106022 CET	443	49735	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.355761051 CET	49740	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.355803967 CET	443	49740	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.355881929 CET	49740	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.356029987 CET	49740	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.356044054 CET	443	49740	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.367876053 CET	443	49736	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.367933989 CET	443	49736	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.367985964 CET	49736	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.368081093 CET	49736	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.368093967 CET	443	49736	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.368124008 CET	49736	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.368133068 CET	443	49736	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.370032072 CET	49741	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.370069027 CET	443	49741	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.370296955 CET	49741	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.370297909 CET	49741	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.370331049 CET	443	49741	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.378678083 CET	443	49738	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.378747940 CET	443	49738	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.378839016 CET	49738	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.378941059 CET	49738	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.378947973 CET	443	49738	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.378957987 CET	49738	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.378961086 CET	443	49738	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.380886078 CET	49742	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.380901098 CET	443	49742	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.380989075 CET	49742	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.381125927 CET	49742	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.381136894 CET	443	49742	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.574881077 CET	443	49739	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.574948072 CET	443	49739	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.575135946 CET	49739	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.575190067 CET	49739	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.575211048 CET	443	49739	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.575212955 CET	49739	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.575220108 CET	443	49739	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.577522039 CET	49743	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.577541113 CET	443	49743	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:08.577620983 CET	49743	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.577761889 CET	49743	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:08.577775955 CET	443	49743	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:09.304486990 CET	443	49737	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:09.305241108 CET	49737	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:09.305270910 CET	443	49737	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:09.305929899 CET	49737	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:09.305937052 CET	443	49737	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:09.738801956 CET	443	49737	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:09.738873959 CET	443	49737	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:09.738955975 CET	49737	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:09.739135027 CET	49737	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:09.739151001 CET	443	49737	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:09.739156008 CET	49737	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:09.739161968 CET	443	49737	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:09.741969109 CET	49744	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:09.741993904 CET	443	49744	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:09.742063046 CET	49744	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:09.742221117 CET	49744	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:09.742238045 CET	443	49744	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.071500063 CET	443	49740	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.072375059 CET	49740	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.072392941 CET	443	49740	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.072834969 CET	49740	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.072841883 CET	443	49740	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.084172010 CET	443	49741	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.084594965 CET	49741	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.084613085 CET	443	49741	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.085017920 CET	49741	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.085024118 CET	443	49741	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.099761009 CET	443	49742	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.100306034 CET	49742	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.100316048 CET	443	49742	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.100704908 CET	49742	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.100711107 CET	443	49742	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.323599100 CET	443	49743	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.324315071 CET	49743	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.324342966 CET	443	49743	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.324750900 CET	49743	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.324757099 CET	443	49743	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.505641937 CET	443	49740	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.505707979 CET	443	49740	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.505944014 CET	49740	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.505973101 CET	49740	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.505992889 CET	443	49740	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.506027937 CET	49740	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.506035089 CET	443	49740	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.508742094 CET	49745	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.508780003 CET	443	49745	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.508899927 CET	49745	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.509066105 CET	49745	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.509078979 CET	443	49745	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.518234968 CET	443	49741	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.518295050 CET	443	49741	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.518424988 CET	49741	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.518462896 CET	49741	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.518462896 CET	49741	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.518479109 CET	443	49741	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.518487930 CET	443	49741	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.520380974 CET	49746	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.520414114 CET	443	49746	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.520493984 CET	49746	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.520621061 CET	49746	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.520634890 CET	443	49746	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.533864021 CET	443	49742	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.533926964 CET	443	49742	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.534041882 CET	49742	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.534085035 CET	49742	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.534094095 CET	443	49742	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.534107924 CET	49742	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.534111023 CET	443	49742	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.535881996 CET	49747	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.535900116 CET	443	49747	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.535975933 CET	49747	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.536096096 CET	49747	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.536107063 CET	443	49747	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.758472919 CET	443	49743	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.758539915 CET	443	49743	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.758686066 CET	49743	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.758797884 CET	49743	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.758815050 CET	443	49743	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.758841991 CET	49743	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.758848906 CET	443	49743	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.761682034 CET	49748	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.761702061 CET	443	49748	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:10.761797905 CET	49748	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.761966944 CET	49748	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:10.761981010 CET	443	49748	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:11.458451033 CET	443	49744	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:11.459137917 CET	49744	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:11.459173918 CET	443	49744	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:11.459587097 CET	49744	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:11.459594011 CET	443	49744	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:11.897959948 CET	443	49744	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:11.898039103 CET	443	49744	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:11.898104906 CET	49744	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:11.898324013 CET	49744	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:11.898338079 CET	443	49744	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:11.898390055 CET	49744	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:11.898396015 CET	443	49744	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:11.901709080 CET	49749	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:11.901747942 CET	443	49749	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:11.901819944 CET	49749	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:11.901972055 CET	49749	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:11.901984930 CET	443	49749	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.226048946 CET	443	49745	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.226634979 CET	49745	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.226658106 CET	443	49745	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.227127075 CET	49745	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.227132082 CET	443	49745	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.234586000 CET	443	49746	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.235028982 CET	49746	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.235059977 CET	443	49746	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.235563993 CET	49746	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.235569000 CET	443	49746	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.252412081 CET	443	49747	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.252861023 CET	49747	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.252876043 CET	443	49747	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.253273010 CET	49747	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.253278017 CET	443	49747	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.479779005 CET	443	49748	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.482033014 CET	49748	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.482064962 CET	443	49748	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.482492924 CET	49748	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.482498884 CET	443	49748	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.660007954 CET	443	49745	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.660084009 CET	443	49745	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.660212040 CET	49745	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.660514116 CET	49745	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.660528898 CET	443	49745	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.660550117 CET	49745	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.660556078 CET	443	49745	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.663599968 CET	49750	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.663657904 CET	443	49750	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.663747072 CET	49750	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.663929939 CET	49750	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.663944960 CET	443	49750	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.671435118 CET	443	49746	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.671516895 CET	443	49746	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.671574116 CET	49746	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.671705961 CET	49746	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.671720982 CET	443	49746	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.671734095 CET	49746	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.671741009 CET	443	49746	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.674163103 CET	49751	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.674196959 CET	443	49751	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.674279928 CET	49751	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.674431086 CET	49751	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.674444914 CET	443	49751	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.686700106 CET	443	49747	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.686773062 CET	443	49747	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.686836958 CET	49747	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.686989069 CET	49747	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.686995029 CET	443	49747	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.687036037 CET	49747	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.687040091 CET	443	49747	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.689325094 CET	49752	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.689372063 CET	443	49752	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.689480066 CET	49752	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.689635038 CET	49752	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.689651966 CET	443	49752	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.918322086 CET	443	49748	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.918392897 CET	443	49748	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.918518066 CET	49748	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.918766022 CET	49748	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.918797970 CET	443	49748	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.918811083 CET	49748	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.918817043 CET	443	49748	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.921876907 CET	49753	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.921932936 CET	443	49753	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:12.922033072 CET	49753	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.922208071 CET	49753	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:12.922224998 CET	443	49753	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:13.624141932 CET	443	49749	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:13.624737024 CET	49749	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:13.624758005 CET	443	49749	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:13.625189066 CET	49749	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:13.625194073 CET	443	49749	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.058197021 CET	443	49749	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.058269024 CET	443	49749	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.058331966 CET	49749	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.058538914 CET	49749	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.058557034 CET	443	49749	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.058609962 CET	49749	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.058617115 CET	443	49749	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.061609983 CET	49754	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.061649084 CET	443	49754	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.061930895 CET	49754	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.062097073 CET	49754	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.062110901 CET	443	49754	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.379626036 CET	443	49750	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.380373955 CET	49750	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.380409956 CET	443	49750	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.380769014 CET	49750	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.380774021 CET	443	49750	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.395530939 CET	443	49751	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.396049023 CET	49751	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.396064043 CET	443	49751	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.396353960 CET	49751	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.396361113 CET	443	49751	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.403264046 CET	443	49752	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.403630972 CET	49752	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.403650999 CET	443	49752	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.404001951 CET	49752	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.404007912 CET	443	49752	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.637417078 CET	443	49753	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.637924910 CET	49753	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.637940884 CET	443	49753	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.638441086 CET	49753	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.638447046 CET	443	49753	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.813237906 CET	443	49750	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.813302040 CET	443	49750	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.813513041 CET	49750	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.813602924 CET	49750	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.813623905 CET	443	49750	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.813635111 CET	49750	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.813641071 CET	443	49750	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.816683054 CET	49755	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.816704035 CET	443	49755	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.816793919 CET	49755	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.816952944 CET	49755	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.816967010 CET	443	49755	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.829483986 CET	443	49751	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.829540968 CET	443	49751	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.829608917 CET	49751	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.829837084 CET	49751	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.829837084 CET	49751	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.829858065 CET	443	49751	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.829864025 CET	443	49751	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.832459927 CET	49756	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.832484007 CET	443	49756	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.832557917 CET	49756	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.832695961 CET	49756	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.832700968 CET	443	49756	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.837171078 CET	443	49752	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.837239981 CET	443	49752	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.837302923 CET	49752	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.837390900 CET	49752	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.837404966 CET	443	49752	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.837418079 CET	49752	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.837423086 CET	443	49752	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.839384079 CET	49757	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.839410067 CET	443	49757	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:14.839497089 CET	49757	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.839628935 CET	49757	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:14.839642048 CET	443	49757	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:15.070874929 CET	443	49753	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:15.070950985 CET	443	49753	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:15.071134090 CET	49753	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:15.071228027 CET	49753	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:15.071238995 CET	443	49753	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:15.071249962 CET	49753	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:15.071254969 CET	443	49753	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:15.074085951 CET	49758	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:15.074129105 CET	443	49758	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:15.074213982 CET	49758	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:15.074379921 CET	49758	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:15.074395895 CET	443	49758	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:15.775717974 CET	443	49754	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:15.776402950 CET	49754	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:15.776431084 CET	443	49754	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:15.776758909 CET	49754	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:15.776765108 CET	443	49754	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.213248014 CET	443	49754	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.213324070 CET	443	49754	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.213380098 CET	49754	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.213596106 CET	49754	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.213613987 CET	443	49754	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.213624001 CET	49754	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.213629007 CET	443	49754	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.216269016 CET	49759	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.216327906 CET	443	49759	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.216402054 CET	49759	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.216548920 CET	49759	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.216562033 CET	443	49759	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.553702116 CET	443	49755	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.554233074 CET	49755	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.554255962 CET	443	49755	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.554718971 CET	49755	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.554724932 CET	443	49755	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.567794085 CET	443	49757	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.567800999 CET	443	49756	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.568249941 CET	49757	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.568279982 CET	443	49757	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.568685055 CET	49757	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.568691969 CET	443	49757	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.568953037 CET	49756	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.568973064 CET	443	49756	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.569253922 CET	49756	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.569259882 CET	443	49756	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.789238930 CET	443	49758	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.789731026 CET	49758	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.789752007 CET	443	49758	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.790141106 CET	49758	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.790147066 CET	443	49758	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.989042997 CET	443	49755	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.989109993 CET	443	49755	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.989212036 CET	49755	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.989486933 CET	49755	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.989501953 CET	443	49755	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.989512920 CET	49755	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.989516973 CET	443	49755	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.992132902 CET	49760	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.992172956 CET	443	49760	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:16.992278099 CET	49760	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.992429972 CET	49760	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:16.992444038 CET	443	49760	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.001270056 CET	443	49756	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.001338959 CET	443	49756	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.001386881 CET	49756	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.001470089 CET	49756	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.001478910 CET	443	49756	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.001485109 CET	49756	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.001490116 CET	443	49756	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.003320932 CET	49761	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.003360987 CET	443	49761	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.003431082 CET	49761	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.003573895 CET	49761	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.003588915 CET	443	49761	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.004643917 CET	443	49757	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.004703999 CET	443	49757	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.004751921 CET	49757	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.004829884 CET	49757	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.004843950 CET	443	49757	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.004880905 CET	49757	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.004887104 CET	443	49757	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.006573915 CET	49762	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.006586075 CET	443	49762	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.006660938 CET	49762	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.006783009 CET	49762	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.006799936 CET	443	49762	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.225197077 CET	443	49758	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.225269079 CET	443	49758	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.225387096 CET	49758	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.225570917 CET	49758	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.225585938 CET	443	49758	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.225619078 CET	49758	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.225625038 CET	443	49758	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.228184938 CET	49763	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.228219032 CET	443	49763	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.228306055 CET	49763	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.228465080 CET	49763	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.228475094 CET	443	49763	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.931675911 CET	443	49759	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.932245970 CET	49759	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.932262897 CET	443	49759	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:17.932719946 CET	49759	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:17.932723999 CET	443	49759	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.365032911 CET	443	49759	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.365102053 CET	443	49759	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.365154028 CET	49759	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.365375042 CET	49759	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.365392923 CET	443	49759	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.365402937 CET	49759	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.365408897 CET	443	49759	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.368168116 CET	49764	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.368235111 CET	443	49764	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.368530035 CET	49764	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.368530035 CET	49764	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.368575096 CET	443	49764	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.724349976 CET	443	49761	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.724885941 CET	49761	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.724900007 CET	443	49761	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.725336075 CET	49761	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.725342035 CET	443	49761	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.728936911 CET	443	49762	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.729197025 CET	49762	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.729233980 CET	443	49762	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.729547024 CET	49762	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.729553938 CET	443	49762	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.793333054 CET	443	49760	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.793822050 CET	49760	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.793833971 CET	443	49760	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.794109106 CET	49760	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.794114113 CET	443	49760	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.943424940 CET	443	49763	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.944089890 CET	49763	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.944106102 CET	443	49763	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:18.944361925 CET	49763	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:18.944365978 CET	443	49763	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.169224977 CET	443	49761	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.169300079 CET	443	49761	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.169313908 CET	443	49762	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.169382095 CET	443	49762	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.169509888 CET	49761	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.169533014 CET	49762	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.169584036 CET	49762	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.169589043 CET	49761	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.169605970 CET	443	49762	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.169611931 CET	443	49761	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.169620991 CET	49762	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.169625998 CET	49761	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.169626951 CET	443	49762	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.169634104 CET	443	49761	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.172069073 CET	49765	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.172106981 CET	443	49765	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.172122955 CET	49766	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.172168016 CET	49765	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.172173023 CET	443	49766	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.172226906 CET	49766	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.172365904 CET	49765	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.172380924 CET	443	49765	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.172390938 CET	49766	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.172406912 CET	443	49766	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.228328943 CET	443	49760	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.228394032 CET	443	49760	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.228698015 CET	49760	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.228698015 CET	49760	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.228698015 CET	49760	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.231067896 CET	49767	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.231087923 CET	443	49767	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.231156111 CET	49767	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.231271982 CET	49767	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.231282949 CET	443	49767	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.387758017 CET	443	49763	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.387834072 CET	443	49763	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.388156891 CET	49763	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.388156891 CET	49763	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.388156891 CET	49763	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.390605927 CET	49768	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.390649080 CET	443	49768	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.390722036 CET	49768	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.390849113 CET	49768	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.390866995 CET	443	49768	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.444741011 CET	49760	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.444756985 CET	443	49760	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:19.694720030 CET	49763	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:19.694739103 CET	443	49763	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.095448971 CET	443	49764	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.096026897 CET	49764	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.096056938 CET	443	49764	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.096447945 CET	49764	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.096453905 CET	443	49764	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.529239893 CET	443	49764	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.529320955 CET	443	49764	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.529380083 CET	49764	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.529546022 CET	49764	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.529568911 CET	443	49764	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.529578924 CET	49764	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.529584885 CET	443	49764	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.532428026 CET	49769	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.532485008 CET	443	49769	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.532583952 CET	49769	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.532748938 CET	49769	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.532766104 CET	443	49769	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.887084007 CET	443	49766	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.887949944 CET	49766	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.887981892 CET	443	49766	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.888417006 CET	49766	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.888422966 CET	443	49766	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.889385939 CET	443	49765	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.889643908 CET	49765	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.889658928 CET	443	49765	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.889983892 CET	49765	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.889991045 CET	443	49765	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.954319954 CET	443	49767	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.954873085 CET	49767	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.954883099 CET	443	49767	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:20.955277920 CET	49767	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:20.955284119 CET	443	49767	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.104176998 CET	443	49768	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.104583025 CET	49768	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.104620934 CET	443	49768	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.105093002 CET	49768	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.105099916 CET	443	49768	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.321016073 CET	443	49766	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.321094036 CET	443	49766	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.321145058 CET	49766	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.321357965 CET	49766	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.321357965 CET	49766	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.321372986 CET	443	49766	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.321382046 CET	443	49766	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.323066950 CET	443	49765	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.323133945 CET	443	49765	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.323199034 CET	49765	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.323261976 CET	49765	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.323276043 CET	443	49765	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.323308945 CET	49765	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.323319912 CET	443	49765	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.324223042 CET	49770	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.324245930 CET	443	49770	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.324317932 CET	49770	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.324592113 CET	49770	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.324632883 CET	443	49770	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.325962067 CET	49771	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.325988054 CET	443	49771	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.326071024 CET	49771	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.326188087 CET	49771	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.326199055 CET	443	49771	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.390903950 CET	443	49767	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.390966892 CET	443	49767	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.391016960 CET	49767	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.391112089 CET	49767	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.391128063 CET	443	49767	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.391136885 CET	49767	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.391149998 CET	443	49767	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.393224955 CET	49772	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.393258095 CET	443	49772	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.393321991 CET	49772	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.393435001 CET	49772	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.393448114 CET	443	49772	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.537774086 CET	443	49768	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.537857056 CET	443	49768	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.537986040 CET	49768	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.538223982 CET	49768	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.538247108 CET	443	49768	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.538260937 CET	49768	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.538265944 CET	443	49768	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.540960073 CET	49773	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.541011095 CET	443	49773	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:21.541091919 CET	49773	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.541263103 CET	49773	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:21.541275978 CET	443	49773	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:22.246583939 CET	443	49769	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:22.247252941 CET	49769	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:22.247289896 CET	443	49769	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:22.247725964 CET	49769	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:22.247734070 CET	443	49769	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:22.684770107 CET	443	49769	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:22.684844017 CET	443	49769	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:22.685061932 CET	49769	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:22.685105085 CET	49769	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:22.685122013 CET	443	49769	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:22.685127974 CET	49769	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:22.685132980 CET	443	49769	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:22.687922001 CET	49774	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:22.687954903 CET	443	49774	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:22.688072920 CET	49774	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:22.688261986 CET	49774	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:22.688277006 CET	443	49774	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.039695024 CET	443	49770	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.040258884 CET	49770	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.040277004 CET	443	49770	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.040718079 CET	49770	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.040724039 CET	443	49770	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.041544914 CET	443	49771	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.041898966 CET	49771	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.041938066 CET	443	49771	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.042454958 CET	49771	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.042462111 CET	443	49771	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.107929945 CET	443	49772	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.108294010 CET	49772	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.108309031 CET	443	49772	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.108717918 CET	49772	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.108722925 CET	443	49772	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.256165981 CET	443	49773	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.256792068 CET	49773	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.256817102 CET	443	49773	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.257244110 CET	49773	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.257250071 CET	443	49773	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.476263046 CET	443	49770	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.476336002 CET	443	49770	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.476403952 CET	49770	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.476943016 CET	49770	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.476974964 CET	443	49770	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.477010965 CET	49770	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.477020025 CET	443	49770	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.477471113 CET	443	49771	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.477535009 CET	443	49771	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.477588892 CET	49771	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.478164911 CET	49771	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.478179932 CET	443	49771	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.478190899 CET	49771	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.478195906 CET	443	49771	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.484826088 CET	49776	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.484827042 CET	49775	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.484850883 CET	443	49776	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.484860897 CET	443	49775	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.484930038 CET	49776	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.485080004 CET	49775	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.485081911 CET	49776	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.485097885 CET	443	49776	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.485130072 CET	49775	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.485142946 CET	443	49775	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.541588068 CET	443	49772	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.541662931 CET	443	49772	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.541734934 CET	49772	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.541847944 CET	49772	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.541857004 CET	443	49772	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.541868925 CET	49772	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.541873932 CET	443	49772	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.543970108 CET	49777	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.544017076 CET	443	49777	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.544090986 CET	49777	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.544234991 CET	49777	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.544249058 CET	443	49777	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.690350056 CET	443	49773	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.690423965 CET	443	49773	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.690488100 CET	49773	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.690682888 CET	49773	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.690695047 CET	443	49773	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.690735102 CET	49773	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.690740108 CET	443	49773	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.693830967 CET	49778	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.693866968 CET	443	49778	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:23.693974018 CET	49778	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.694134951 CET	49778	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:23.694150925 CET	443	49778	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:24.404465914 CET	443	49774	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:24.404967070 CET	49774	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:24.405004025 CET	443	49774	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:24.405443907 CET	49774	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:24.405451059 CET	443	49774	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:24.837810993 CET	443	49774	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:24.837891102 CET	443	49774	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:24.838155031 CET	49774	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:24.838198900 CET	49774	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:24.838212967 CET	443	49774	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:24.838260889 CET	49774	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:24.838268042 CET	443	49774	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:24.840841055 CET	49779	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:24.840876102 CET	443	49779	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:24.840959072 CET	49779	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:24.841119051 CET	49779	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:24.841134071 CET	443	49779	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.463361979 CET	443	49776	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.463378906 CET	443	49775	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.463896036 CET	49775	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.463901043 CET	49776	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.463917017 CET	443	49775	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.463934898 CET	443	49776	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.464365959 CET	49775	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.464373112 CET	443	49775	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.464431047 CET	49776	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.464437008 CET	443	49776	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.484466076 CET	443	49777	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.484786987 CET	49777	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.484803915 CET	443	49777	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.485156059 CET	49777	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.485163927 CET	443	49777	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.527925968 CET	443	49778	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.528918028 CET	49778	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.528930902 CET	443	49778	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.529316902 CET	49778	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.529323101 CET	443	49778	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.896697044 CET	443	49776	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.896760941 CET	443	49776	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.896828890 CET	49776	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.897056103 CET	49776	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.897078037 CET	443	49776	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.897089958 CET	49776	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.897095919 CET	443	49776	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.898435116 CET	443	49775	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.898499012 CET	443	49775	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.898550987 CET	49775	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.898955107 CET	49775	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.898968935 CET	443	49775	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.898978949 CET	49775	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.898984909 CET	443	49775	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.901038885 CET	49780	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.901057005 CET	443	49780	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.901158094 CET	49780	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.902632952 CET	49781	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.902663946 CET	443	49781	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.902726889 CET	49781	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.906451941 CET	49781	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.906471014 CET	49780	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.906474113 CET	443	49781	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.906481028 CET	443	49780	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.918546915 CET	443	49777	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.918616056 CET	443	49777	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.918692112 CET	49777	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.918790102 CET	49777	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.918791056 CET	49777	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.918807983 CET	443	49777	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.918817997 CET	443	49777	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.920907021 CET	49782	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.920919895 CET	443	49782	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.920993090 CET	49782	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.921127081 CET	49782	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.921139002 CET	443	49782	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.961525917 CET	443	49778	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.961584091 CET	443	49778	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.961666107 CET	49778	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.961795092 CET	49778	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.961810112 CET	443	49778	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.961819887 CET	49778	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.961824894 CET	443	49778	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.963846922 CET	49783	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.963875055 CET	443	49783	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:25.963956118 CET	49783	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.964083910 CET	49783	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:25.964097977 CET	443	49783	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:26.553900957 CET	443	49779	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:26.554419041 CET	49779	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:26.554445028 CET	443	49779	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:26.554881096 CET	49779	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:26.554888010 CET	443	49779	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:26.986965895 CET	443	49779	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:26.987035990 CET	443	49779	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:26.987250090 CET	49779	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:26.987287998 CET	49779	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:26.987304926 CET	443	49779	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:26.987324953 CET	49779	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:26.987329960 CET	443	49779	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:26.990150928 CET	49784	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:26.990184069 CET	443	49784	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:26.990271091 CET	49784	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:26.990407944 CET	49784	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:26.990423918 CET	443	49784	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.634684086 CET	443	49780	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.635289907 CET	49780	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:27.635301113 CET	443	49780	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.635745049 CET	49780	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:27.635750055 CET	443	49780	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.638887882 CET	443	49781	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.639245033 CET	49781	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:27.639266014 CET	443	49781	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.639636040 CET	49781	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:27.639641047 CET	443	49781	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.649928093 CET	443	49782	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.650341988 CET	49782	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:27.650350094 CET	443	49782	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.650780916 CET	49782	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:27.650785923 CET	443	49782	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.677387953 CET	443	49783	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.677746058 CET	49783	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:27.677757025 CET	443	49783	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:27.678153992 CET	49783	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:27.678159952 CET	443	49783	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.067791939 CET	443	49780	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.067859888 CET	443	49780	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.068219900 CET	49780	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.068219900 CET	49780	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.068219900 CET	49780	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.070985079 CET	49785	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.071022034 CET	443	49785	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.071103096 CET	49785	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.071254969 CET	49785	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.071270943 CET	443	49785	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.072693110 CET	443	49781	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.072762012 CET	443	49781	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.072873116 CET	49781	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.072900057 CET	49781	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.072912931 CET	443	49781	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.072921991 CET	49781	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.072927952 CET	443	49781	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.074829102 CET	49786	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.074857950 CET	443	49786	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.074920893 CET	49786	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.075038910 CET	49786	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.075050116 CET	443	49786	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.083159924 CET	443	49782	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.083228111 CET	443	49782	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.083342075 CET	49782	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.083364964 CET	49782	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.083376884 CET	443	49782	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.083388090 CET	49782	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.083393097 CET	443	49782	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.085262060 CET	49787	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.085278988 CET	443	49787	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.085338116 CET	49787	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.085483074 CET	49787	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.085496902 CET	443	49787	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.113014936 CET	443	49783	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.113084078 CET	443	49783	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.113141060 CET	49783	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.113360882 CET	49783	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.113373041 CET	443	49783	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.113399029 CET	49783	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.113404036 CET	443	49783	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.115869999 CET	49788	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.115900993 CET	443	49788	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.115961075 CET	49788	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.116092920 CET	49788	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.116103888 CET	443	49788	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.382361889 CET	49780	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.382370949 CET	443	49780	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.718326092 CET	443	49784	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.718832016 CET	49784	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.718847036 CET	443	49784	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:28.719288111 CET	49784	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:28.719294071 CET	443	49784	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.151479959 CET	443	49784	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.151555061 CET	443	49784	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.151623011 CET	49784	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.151817083 CET	49784	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.151817083 CET	49784	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.151830912 CET	443	49784	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.151837111 CET	443	49784	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.154510021 CET	49789	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.154531956 CET	443	49789	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.154613972 CET	49789	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.154773951 CET	49789	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.154788017 CET	443	49789	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.604429960 CET	443	49786	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.604929924 CET	49786	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.604943991 CET	443	49786	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.605393887 CET	49786	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.605398893 CET	443	49786	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.792617083 CET	443	49785	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.793245077 CET	49785	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.793287992 CET	443	49785	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.793730021 CET	49785	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.793735027 CET	443	49785	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.801189899 CET	443	49787	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.801543951 CET	49787	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.801557064 CET	443	49787	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.801901102 CET	49787	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.801906109 CET	443	49787	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.833786011 CET	443	49788	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.834299088 CET	49788	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.834316015 CET	443	49788	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:29.834731102 CET	49788	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:29.834737062 CET	443	49788	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.037957907 CET	443	49786	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.038027048 CET	443	49786	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.038098097 CET	49786	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.038290024 CET	49786	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.038306952 CET	443	49786	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.038320065 CET	49786	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.038325071 CET	443	49786	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.041366100 CET	49790	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.041392088 CET	443	49790	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.041529894 CET	49790	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.041646957 CET	49790	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.041659117 CET	443	49790	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.226243973 CET	443	49785	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.226320982 CET	443	49785	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.226397991 CET	49785	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.226625919 CET	49785	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.226639986 CET	443	49785	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.226649046 CET	49785	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.226654053 CET	443	49785	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.229388952 CET	49791	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.229428053 CET	443	49791	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.229506016 CET	49791	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.229666948 CET	49791	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.229681015 CET	443	49791	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.236496925 CET	443	49787	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.236567974 CET	443	49787	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.236620903 CET	49787	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.236713886 CET	49787	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.236713886 CET	49787	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.236721039 CET	443	49787	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.236723900 CET	443	49787	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.239201069 CET	49792	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.239242077 CET	443	49792	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.239365101 CET	49792	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.239439964 CET	49792	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.239458084 CET	443	49792	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.278738976 CET	443	49788	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.278809071 CET	443	49788	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.278866053 CET	49788	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.278996944 CET	49788	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.278996944 CET	49788	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.279012918 CET	443	49788	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.279023886 CET	443	49788	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.281228065 CET	49793	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.281248093 CET	443	49793	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.281311035 CET	49793	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.281491995 CET	49793	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.281506062 CET	443	49793	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.869062901 CET	443	49789	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.869613886 CET	49789	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.869640112 CET	443	49789	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:30.870089054 CET	49789	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:30.870095015 CET	443	49789	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.304429054 CET	443	49789	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.304511070 CET	443	49789	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.304624081 CET	49789	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.304991007 CET	49789	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.305003881 CET	443	49789	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.305016041 CET	49789	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.305021048 CET	443	49789	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.307554007 CET	49794	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.307594061 CET	443	49794	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.307674885 CET	49794	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.307806015 CET	49794	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.307820082 CET	443	49794	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.771713018 CET	443	49790	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.772576094 CET	49790	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.772598028 CET	443	49790	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.773060083 CET	49790	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.773066044 CET	443	49790	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.963673115 CET	443	49791	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.964282990 CET	49791	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.964315891 CET	443	49791	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.964746952 CET	49791	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.964752913 CET	443	49791	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.978136063 CET	443	49792	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.978482008 CET	49792	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.978506088 CET	443	49792	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:31.978857994 CET	49792	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:31.978864908 CET	443	49792	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.015585899 CET	443	49793	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.016064882 CET	49793	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.016091108 CET	443	49793	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.016438007 CET	49793	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.016444921 CET	443	49793	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.214353085 CET	443	49790	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.214428902 CET	443	49790	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.214550972 CET	49790	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.214772940 CET	49790	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.214788914 CET	443	49790	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.214801073 CET	49790	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.214807034 CET	443	49790	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.217581034 CET	49795	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.217628956 CET	443	49795	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.217715025 CET	49795	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.217890024 CET	49795	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.217906952 CET	443	49795	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.397155046 CET	443	49791	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.397217989 CET	443	49791	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.397367001 CET	49791	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.397660017 CET	49791	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.397680998 CET	443	49791	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.397692919 CET	49791	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.397703886 CET	443	49791	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.400645018 CET	49796	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.400691032 CET	443	49796	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.400779009 CET	49796	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.400991917 CET	49796	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.401005030 CET	443	49796	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.411370993 CET	443	49792	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.411432981 CET	443	49792	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.411571026 CET	49792	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.411955118 CET	49792	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.411977053 CET	443	49792	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.411990881 CET	49792	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.411997080 CET	443	49792	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.414455891 CET	49797	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.414488077 CET	443	49797	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.414566040 CET	49797	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.414776087 CET	49797	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.414789915 CET	443	49797	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.449173927 CET	443	49793	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.449258089 CET	443	49793	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.449393988 CET	49793	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.449636936 CET	49793	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.449657917 CET	443	49793	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.449668884 CET	49793	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.449675083 CET	443	49793	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.452579975 CET	49798	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.452601910 CET	443	49798	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:32.452864885 CET	49798	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.452864885 CET	49798	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:32.452889919 CET	443	49798	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.023782969 CET	443	49794	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.024332047 CET	49794	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:33.024353027 CET	443	49794	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.024828911 CET	49794	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:33.024833918 CET	443	49794	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.457058907 CET	443	49794	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.457125902 CET	443	49794	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.457171917 CET	49794	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:33.457478046 CET	49794	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:33.457499027 CET	443	49794	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.457515001 CET	49794	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:33.457521915 CET	443	49794	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.462574005 CET	49799	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:33.462647915 CET	443	49799	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.462714911 CET	49799	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:33.463742971 CET	49799	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:33.463762999 CET	443	49799	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.933248043 CET	443	49795	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.933778048 CET	49795	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:33.933808088 CET	443	49795	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:33.934236050 CET	49795	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:33.934242964 CET	443	49795	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.115406036 CET	443	49796	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.115920067 CET	49796	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.115943909 CET	443	49796	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.116370916 CET	49796	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.116377115 CET	443	49796	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.127190113 CET	443	49797	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.127507925 CET	49797	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.127533913 CET	443	49797	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.127969027 CET	49797	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.127973080 CET	443	49797	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.173372030 CET	443	49798	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.173855066 CET	49798	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.173866987 CET	443	49798	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.174365997 CET	49798	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.174371004 CET	443	49798	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.366719961 CET	443	49795	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.366796017 CET	443	49795	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.367000103 CET	49795	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.367041111 CET	49795	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.367057085 CET	443	49795	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.367067099 CET	49795	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.367074013 CET	443	49795	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.369544029 CET	49800	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.369574070 CET	443	49800	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.369638920 CET	49800	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.369760036 CET	49800	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.369777918 CET	443	49800	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.548811913 CET	443	49796	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.548880100 CET	443	49796	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.549105883 CET	49796	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.549160004 CET	49796	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.549176931 CET	443	49796	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.549187899 CET	49796	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.549194098 CET	443	49796	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.551745892 CET	49801	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.551784992 CET	443	49801	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.551862955 CET	49801	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.551990986 CET	49801	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.552005053 CET	443	49801	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.560522079 CET	443	49797	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.560583115 CET	443	49797	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.560726881 CET	49797	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.560879946 CET	49797	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.560899019 CET	443	49797	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.560909033 CET	49797	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.560914040 CET	443	49797	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.563052893 CET	49802	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.563091993 CET	443	49802	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.563175917 CET	49802	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.563338995 CET	49802	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.563353062 CET	443	49802	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.606760025 CET	443	49798	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.606818914 CET	443	49798	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.607023001 CET	49798	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.607023001 CET	49798	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.607048988 CET	49798	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.607064009 CET	443	49798	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.608972073 CET	49803	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.608989954 CET	443	49803	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:34.609055042 CET	49803	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.609162092 CET	49803	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:34.609174013 CET	443	49803	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:35.177483082 CET	443	49799	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:35.178049088 CET	49799	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:35.178086042 CET	443	49799	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:35.178514957 CET	49799	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:35.178520918 CET	443	49799	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:35.610519886 CET	443	49799	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:35.610598087 CET	443	49799	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:35.610773087 CET	49799	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:35.610876083 CET	49799	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:35.610901117 CET	443	49799	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:35.610913038 CET	49799	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:35.610918045 CET	443	49799	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:35.613873959 CET	49804	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:35.613910913 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:35.614005089 CET	49804	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:35.614165068 CET	49804	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:35.614176035 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.086954117 CET	443	49800	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.087472916 CET	49800	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.087495089 CET	443	49800	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.087922096 CET	49800	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.087928057 CET	443	49800	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.270795107 CET	443	49801	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.271236897 CET	49801	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.271260023 CET	443	49801	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.271773100 CET	49801	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.271779060 CET	443	49801	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.281069040 CET	443	49802	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.281408072 CET	49802	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.281431913 CET	443	49802	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.281810045 CET	49802	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.281815052 CET	443	49802	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.332529068 CET	443	49803	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.332849979 CET	49803	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.332859993 CET	443	49803	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.333301067 CET	49803	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.333304882 CET	443	49803	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.520589113 CET	443	49800	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.520657063 CET	443	49800	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.520710945 CET	49800	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.520876884 CET	49800	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.520890951 CET	443	49800	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.520901918 CET	49800	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.520909071 CET	443	49800	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.524075031 CET	49805	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.524106026 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.524172068 CET	49805	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.531847954 CET	49805	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.531866074 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.709675074 CET	443	49801	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.709697962 CET	443	49801	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.709750891 CET	443	49801	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.709939003 CET	49801	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.710196972 CET	49801	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.710222960 CET	443	49801	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.710233927 CET	49801	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.710239887 CET	443	49801	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.713255882 CET	49806	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.713283062 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.713372946 CET	49806	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.713532925 CET	49806	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.713547945 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.714696884 CET	443	49802	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.714771032 CET	443	49802	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.714821100 CET	49802	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.714900970 CET	49802	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.714910984 CET	443	49802	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.714947939 CET	49802	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.714952946 CET	443	49802	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.716866016 CET	49807	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.716892004 CET	443	49807	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.716958046 CET	49807	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.717118025 CET	49807	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.717132092 CET	443	49807	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.765583992 CET	443	49803	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.765636921 CET	443	49803	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.765691042 CET	49803	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.765813112 CET	49803	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.765819073 CET	443	49803	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.765829086 CET	49803	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.765831947 CET	443	49803	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.767828941 CET	49808	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.767844915 CET	443	49808	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:36.767925978 CET	49808	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.768044949 CET	49808	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:36.768059015 CET	443	49808	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.071798086 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:37.071841002 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:37.071907997 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:37.072247028 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:37.072262049 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:37.327721119 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.328227997 CET	49804	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:37.328253984 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.328665018 CET	49804	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:37.328671932 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.767076015 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.767091036 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.767183065 CET	49804	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:37.767215014 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.767443895 CET	49804	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:37.767463923 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.767471075 CET	49804	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:37.767641068 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.767668009 CET	443	49804	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.767715931 CET	49804	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:37.770035028 CET	49810	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:37.770068884 CET	443	49810	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:37.770154953 CET	49810	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:37.770339966 CET	49810	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:37.770356894 CET	443	49810	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.245012999 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.245810032 CET	49805	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.245826960 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.246299982 CET	49805	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.246305943 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.428116083 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.428859949 CET	49806	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.428879023 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.429341078 CET	49806	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.429347038 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.432034969 CET	443	49807	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.432322025 CET	49807	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.432338953 CET	443	49807	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.432652950 CET	49807	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.432657957 CET	443	49807	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.483645916 CET	443	49808	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.484299898 CET	49808	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.484318018 CET	443	49808	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.484689951 CET	49808	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.484697104 CET	443	49808	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.683604956 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.683629036 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.683696985 CET	49805	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.683723927 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.683777094 CET	49805	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.683998108 CET	49805	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.684003115 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.684021950 CET	49805	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.684169054 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.684197903 CET	443	49805	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.684242964 CET	49805	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.686626911 CET	49811	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.686681032 CET	443	49811	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.686744928 CET	49811	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.686887026 CET	49811	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.686903954 CET	443	49811	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.690692902 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:38.690778017 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:38.694061041 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:38.694073915 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:38.694307089 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:38.702486992 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:38.747333050 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:38.865048885 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.865077972 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.865143061 CET	49806	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.865159988 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.865390062 CET	49806	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.865410089 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.865427017 CET	49806	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.865566015 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.865595102 CET	443	49806	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.865632057 CET	49806	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.865778923 CET	443	49807	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.868108034 CET	49812	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.868144035 CET	443	49812	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.868206978 CET	49812	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.868346930 CET	49812	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.868360043 CET	443	49812	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.868578911 CET	443	49807	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.868633986 CET	49807	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.868665934 CET	49807	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.868676901 CET	443	49807	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.868686914 CET	49807	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.868690014 CET	443	49807	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.870567083 CET	49813	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.870594025 CET	443	49813	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.870671034 CET	49813	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.870817900 CET	49813	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.870829105 CET	443	49813	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.937263012 CET	443	49808	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.940366983 CET	443	49808	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.940448999 CET	49808	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.940485954 CET	49808	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.940501928 CET	443	49808	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.940522909 CET	49808	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.940527916 CET	443	49808	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.942537069 CET	49814	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.942565918 CET	443	49814	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:38.942657948 CET	49814	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.942769051 CET	49814	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:38.942781925 CET	443	49814	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:39.346653938 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:39.346676111 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:39.346690893 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:39.346760988 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:39.346795082 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:39.346851110 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:39.390697002 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:39.390746117 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:39.390772104 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:39.390788078 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:39.390839100 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:39.390959978 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:39.390980959 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:39.390993118 CET	49809	443	192.168.2.5	20.109.210.53
Dec 9, 2024 11:36:39.390997887 CET	443	49809	20.109.210.53	192.168.2.5
Dec 9, 2024 11:36:39.485498905 CET	443	49810	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:39.486005068 CET	49810	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:39.486027956 CET	443	49810	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:39.486448050 CET	49810	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:39.486454010 CET	443	49810	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:39.919805050 CET	443	49810	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:39.919881105 CET	443	49810	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:39.920155048 CET	49810	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:39.920203924 CET	49810	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:39.920203924 CET	49810	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:39.920228004 CET	443	49810	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:39.920237064 CET	443	49810	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:39.923054934 CET	49815	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:39.923101902 CET	443	49815	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:39.923197985 CET	49815	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:39.923365116 CET	49815	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:39.923377991 CET	443	49815	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.402281046 CET	443	49811	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.402875900 CET	49811	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.402906895 CET	443	49811	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.403326988 CET	49811	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.403333902 CET	443	49811	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.582355976 CET	443	49812	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.583115101 CET	49812	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.583149910 CET	443	49812	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.583585978 CET	49812	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.583590984 CET	443	49812	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.585464954 CET	443	49813	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.585738897 CET	49813	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.585771084 CET	443	49813	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.586091042 CET	49813	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.586097002 CET	443	49813	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.658230066 CET	443	49814	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.658727884 CET	49814	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.658745050 CET	443	49814	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.659158945 CET	49814	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.659164906 CET	443	49814	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.836380959 CET	443	49811	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.840015888 CET	443	49811	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.840187073 CET	49811	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.840367079 CET	49811	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.840394974 CET	443	49811	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.840409994 CET	49811	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.840415001 CET	443	49811	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.843210936 CET	49816	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.843271971 CET	443	49816	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:40.843348026 CET	49816	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.843480110 CET	49816	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:40.843497992 CET	443	49816	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.016252995 CET	443	49812	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.016334057 CET	443	49812	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.016393900 CET	49812	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.016582966 CET	49812	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.016612053 CET	443	49812	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.016623974 CET	49812	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.016629934 CET	443	49812	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.018922091 CET	443	49813	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.019645929 CET	49817	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.019685984 CET	443	49817	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.019937992 CET	49817	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.019937992 CET	49817	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.019968987 CET	443	49817	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.022881985 CET	443	49813	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.022941113 CET	49813	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.022989035 CET	49813	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.023009062 CET	443	49813	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.023017883 CET	49813	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.023022890 CET	443	49813	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.025084972 CET	49818	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.025129080 CET	443	49818	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.025202036 CET	49818	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.025335073 CET	49818	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.025351048 CET	443	49818	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.091531038 CET	443	49814	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.095043898 CET	443	49814	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.095134974 CET	49814	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.095195055 CET	49814	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.095207930 CET	443	49814	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.095218897 CET	49814	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.095223904 CET	443	49814	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.097543001 CET	49819	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.097570896 CET	443	49819	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.097717047 CET	49819	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.097799063 CET	49819	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.097810030 CET	443	49819	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.642781019 CET	443	49815	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.643290997 CET	49815	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.643320084 CET	443	49815	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:41.643755913 CET	49815	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:41.643759966 CET	443	49815	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.076499939 CET	443	49815	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.079854012 CET	443	49815	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.079946041 CET	49815	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.080008030 CET	49815	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.080028057 CET	443	49815	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.080039978 CET	49815	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.080044985 CET	443	49815	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.082921028 CET	49820	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.082967997 CET	443	49820	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.083129883 CET	49820	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.083177090 CET	49820	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.083188057 CET	443	49820	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.735811949 CET	443	49817	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.736650944 CET	49817	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.736669064 CET	443	49817	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.737351894 CET	49817	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.737358093 CET	443	49817	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.740056992 CET	443	49818	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.740802050 CET	49818	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.740829945 CET	443	49818	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.741796017 CET	49818	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.741801977 CET	443	49818	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.815166950 CET	443	49819	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.815661907 CET	49819	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.815674067 CET	443	49819	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:42.816112041 CET	49819	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:42.816116095 CET	443	49819	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.277326107 CET	443	49817	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.278297901 CET	443	49819	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.279218912 CET	443	49818	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.280163050 CET	443	49817	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.280266047 CET	49817	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.280376911 CET	49817	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.280394077 CET	443	49817	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.280405998 CET	49817	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.280412912 CET	443	49817	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.281281948 CET	443	49819	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.281335115 CET	443	49819	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.281393051 CET	49819	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.281811953 CET	49819	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.281816959 CET	443	49819	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.281837940 CET	49819	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.281841993 CET	443	49819	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.281852007 CET	443	49818	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.281904936 CET	49818	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.284321070 CET	49818	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.284352064 CET	443	49818	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.284363985 CET	49818	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.284372091 CET	443	49818	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.288050890 CET	49822	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.288090944 CET	443	49822	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.288532972 CET	49822	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.291006088 CET	49823	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.291033030 CET	443	49823	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.291096926 CET	49823	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.291409969 CET	49822	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.291426897 CET	443	49822	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.292408943 CET	49824	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.292455912 CET	443	49824	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.292521954 CET	49824	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.292834997 CET	49824	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.292855978 CET	443	49824	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.292980909 CET	49823	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.292994976 CET	443	49823	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.724176884 CET	443	49816	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.724982023 CET	49816	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.725004911 CET	443	49816	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.725455046 CET	49816	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.725460052 CET	443	49816	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.796606064 CET	443	49820	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.797136068 CET	49820	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.797154903 CET	443	49820	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:43.797629118 CET	49820	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:43.797636032 CET	443	49820	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.157906055 CET	443	49816	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.161470890 CET	443	49816	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.161536932 CET	49816	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.161580086 CET	49816	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.161587000 CET	443	49816	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.161628008 CET	49816	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.161632061 CET	443	49816	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.164314985 CET	49825	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.164335966 CET	443	49825	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.164403915 CET	49825	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.164544106 CET	49825	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.164565086 CET	443	49825	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.229695082 CET	443	49820	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.233499050 CET	443	49820	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.233571053 CET	49820	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.233634949 CET	49820	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.233654976 CET	443	49820	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.233664989 CET	49820	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.233670950 CET	443	49820	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.236247063 CET	49826	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.236268997 CET	443	49826	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:44.236347914 CET	49826	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.236494064 CET	49826	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:44.236505032 CET	443	49826	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.011722088 CET	443	49823	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.012161970 CET	49823	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.012181997 CET	443	49823	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.012371063 CET	443	49822	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.012607098 CET	49823	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.012613058 CET	443	49823	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.012794971 CET	49822	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.012825966 CET	443	49822	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.012861967 CET	443	49824	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.013168097 CET	49822	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.013173103 CET	443	49822	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.013346910 CET	49824	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.013381958 CET	443	49824	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.013673067 CET	49824	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.013679028 CET	443	49824	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.445559025 CET	443	49823	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.446454048 CET	443	49822	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.446482897 CET	443	49822	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.446535110 CET	443	49822	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.446538925 CET	49822	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.446590900 CET	49822	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.446789026 CET	49822	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.446815968 CET	443	49822	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.446826935 CET	49822	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.446832895 CET	443	49822	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.447829962 CET	443	49824	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.447932005 CET	443	49824	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.447983027 CET	49824	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.448785067 CET	49824	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.448787928 CET	443	49823	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.448807001 CET	443	49824	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.448818922 CET	49824	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.448824883 CET	443	49824	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.448849916 CET	49823	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.449132919 CET	49823	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.449132919 CET	49823	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.449151039 CET	443	49823	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.449162006 CET	443	49823	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.451591969 CET	49827	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.451634884 CET	443	49827	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.451697111 CET	49827	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.452513933 CET	49828	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.452562094 CET	443	49828	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.452620983 CET	49828	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.452725887 CET	49827	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.452745914 CET	443	49827	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.452912092 CET	49829	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.452951908 CET	443	49829	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.453005075 CET	49829	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.453032970 CET	49828	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.453049898 CET	443	49828	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.453169107 CET	49829	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.453181982 CET	443	49829	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.878603935 CET	443	49825	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.879069090 CET	49825	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.879096985 CET	443	49825	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.879559994 CET	49825	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.879565954 CET	443	49825	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.952147007 CET	443	49826	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.952606916 CET	49826	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.952636003 CET	443	49826	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:45.953059912 CET	49826	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:45.953066111 CET	443	49826	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.313623905 CET	443	49825	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.316553116 CET	443	49825	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.316720963 CET	49825	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.316884995 CET	49825	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.316906929 CET	443	49825	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.316920996 CET	49825	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.316926956 CET	443	49825	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.319782972 CET	49830	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.319828987 CET	443	49830	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.319967985 CET	49830	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.320139885 CET	49830	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.320157051 CET	443	49830	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.385534048 CET	443	49826	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.389164925 CET	443	49826	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.389204979 CET	443	49826	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.389221907 CET	49826	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.389266014 CET	49826	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.389332056 CET	49826	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.389358044 CET	443	49826	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.389370918 CET	49826	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.389377117 CET	443	49826	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.392204046 CET	49831	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.392246008 CET	443	49831	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:46.392333031 CET	49831	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.392527103 CET	49831	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:46.392544985 CET	443	49831	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.166193962 CET	443	49827	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.166790009 CET	49827	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.166811943 CET	443	49828	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.166825056 CET	443	49827	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.167193890 CET	49828	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.167216063 CET	443	49828	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.167465925 CET	49827	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.167484045 CET	443	49827	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.167584896 CET	49828	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.167589903 CET	443	49828	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.168670893 CET	443	49829	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.168991089 CET	49829	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.169012070 CET	443	49829	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.169307947 CET	49829	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.169312954 CET	443	49829	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.561486959 CET	49832	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:36:47.561537027 CET	443	49832	142.250.181.68	192.168.2.5
Dec 9, 2024 11:36:47.561625957 CET	49832	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:36:47.561871052 CET	49832	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:36:47.561886072 CET	443	49832	142.250.181.68	192.168.2.5
Dec 9, 2024 11:36:47.599915981 CET	443	49828	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.600347042 CET	443	49827	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.602153063 CET	443	49829	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.602727890 CET	443	49829	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.602811098 CET	49829	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.602857113 CET	49829	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.602876902 CET	443	49829	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.602889061 CET	49829	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.602894068 CET	443	49829	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.603326082 CET	443	49827	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.603384972 CET	49827	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.603439093 CET	49827	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.603452921 CET	443	49827	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.603463888 CET	49827	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.603468895 CET	443	49827	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.603822947 CET	443	49828	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.603878021 CET	49828	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.604060888 CET	49828	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.604074955 CET	443	49828	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.604098082 CET	49828	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.604104042 CET	443	49828	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.606251955 CET	49833	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.606281042 CET	443	49833	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.606347084 CET	49833	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.606502056 CET	49833	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.606517076 CET	443	49833	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.606664896 CET	49834	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.606687069 CET	443	49834	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.606751919 CET	49834	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.606853962 CET	49834	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.606865883 CET	443	49834	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.606924057 CET	49835	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.606931925 CET	443	49835	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:47.606996059 CET	49835	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.607142925 CET	49835	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:47.607152939 CET	443	49835	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.032814980 CET	443	49830	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.033324003 CET	49830	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.033349037 CET	443	49830	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.033782005 CET	49830	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.033787966 CET	443	49830	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.124993086 CET	443	49831	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.125416040 CET	49831	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.125439882 CET	443	49831	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.125849009 CET	49831	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.125854015 CET	443	49831	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.466412067 CET	443	49830	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.469621897 CET	443	49830	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.469679117 CET	49830	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.469682932 CET	443	49830	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.469737053 CET	49830	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.469779015 CET	49830	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.469805956 CET	443	49830	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.469819069 CET	49830	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.469825029 CET	443	49830	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.472718954 CET	49836	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.472763062 CET	443	49836	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.472843885 CET	49836	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.472973108 CET	49836	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.472989082 CET	443	49836	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.559340954 CET	443	49831	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.563071012 CET	443	49831	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.563139915 CET	49831	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.563261032 CET	49831	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.563278913 CET	443	49831	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.563292027 CET	49831	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.563297033 CET	443	49831	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.566447020 CET	49837	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.566479921 CET	443	49837	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:48.566643953 CET	49837	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.566809893 CET	49837	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:48.566817999 CET	443	49837	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.255012989 CET	443	49832	142.250.181.68	192.168.2.5
Dec 9, 2024 11:36:49.255346060 CET	49832	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:36:49.255371094 CET	443	49832	142.250.181.68	192.168.2.5
Dec 9, 2024 11:36:49.255831957 CET	443	49832	142.250.181.68	192.168.2.5
Dec 9, 2024 11:36:49.256150007 CET	49832	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:36:49.256227016 CET	443	49832	142.250.181.68	192.168.2.5
Dec 9, 2024 11:36:49.304208040 CET	49832	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:36:49.323884010 CET	443	49833	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.324198008 CET	443	49834	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.324503899 CET	49833	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.324517012 CET	443	49833	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.324692011 CET	49834	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.324717999 CET	443	49834	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.324738026 CET	443	49835	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.325119019 CET	49834	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.325123072 CET	443	49834	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.325299025 CET	49833	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.325304985 CET	443	49833	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.325345039 CET	49835	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.325356960 CET	443	49835	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.325700045 CET	49835	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.325704098 CET	443	49835	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.757247925 CET	443	49834	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.757463932 CET	443	49833	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.757847071 CET	443	49833	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.757910013 CET	49833	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.757921934 CET	443	49835	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.757952929 CET	49833	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.757966042 CET	443	49833	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.760786057 CET	49838	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.760829926 CET	443	49838	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.760917902 CET	49838	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.760977030 CET	443	49834	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.761037111 CET	49834	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.761044025 CET	443	49834	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.761101007 CET	49834	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.761127949 CET	49834	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.761143923 CET	443	49834	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.761157990 CET	49834	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.761169910 CET	443	49834	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.761241913 CET	49838	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.761255980 CET	443	49838	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.761255980 CET	443	49835	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.761321068 CET	49835	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.761334896 CET	49835	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.761341095 CET	443	49835	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.761351109 CET	49835	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.761356115 CET	443	49835	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.763515949 CET	49839	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.763525963 CET	49840	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.763549089 CET	443	49840	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.763549089 CET	443	49839	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.763622999 CET	49840	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.763689041 CET	49839	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.763739109 CET	49839	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.763750076 CET	443	49839	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:49.763788939 CET	49840	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:49.763799906 CET	443	49840	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.190431118 CET	443	49836	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.190973043 CET	49836	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.190999031 CET	443	49836	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.191442966 CET	49836	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.191452980 CET	443	49836	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.287885904 CET	443	49837	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.288304090 CET	49837	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.288317919 CET	443	49837	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.288949966 CET	49837	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.288954973 CET	443	49837	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.623514891 CET	443	49836	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.629414082 CET	443	49836	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.629492044 CET	49836	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.629540920 CET	49836	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.629559040 CET	443	49836	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.629580021 CET	49836	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.629585981 CET	443	49836	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.632191896 CET	49841	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.632224083 CET	443	49841	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.632328033 CET	49841	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.632483006 CET	49841	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.632498980 CET	443	49841	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.722421885 CET	443	49837	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.725312948 CET	443	49837	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.725366116 CET	443	49837	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.725404978 CET	49837	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.725452900 CET	49837	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.725502014 CET	49837	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.725519896 CET	443	49837	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.725529909 CET	49837	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.725536108 CET	443	49837	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.728399038 CET	49842	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.728446007 CET	443	49842	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:50.728518009 CET	49842	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.728668928 CET	49842	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:50.728686094 CET	443	49842	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.477957964 CET	443	49839	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.478533983 CET	49839	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.478545904 CET	443	49839	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.479120970 CET	443	49838	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.479193926 CET	49839	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.479199886 CET	443	49839	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.479537010 CET	49838	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.479553938 CET	443	49838	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.480225086 CET	49838	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.480228901 CET	443	49838	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.508352041 CET	443	49840	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.508857012 CET	49840	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.508874893 CET	443	49840	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.509397984 CET	49840	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.509406090 CET	443	49840	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.966744900 CET	443	49838	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.966828108 CET	443	49838	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.966934919 CET	49838	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.967056036 CET	49838	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.967076063 CET	443	49838	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.967086077 CET	49838	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.967092037 CET	443	49838	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.970032930 CET	49843	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.970062017 CET	443	49843	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.970168114 CET	49843	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.970316887 CET	49843	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.970331907 CET	443	49843	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.971055031 CET	443	49839	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.971406937 CET	443	49839	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.971455097 CET	49839	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.971486092 CET	49839	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.971499920 CET	443	49839	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.971510887 CET	49839	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.971515894 CET	443	49839	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.971801043 CET	443	49840	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.971985102 CET	443	49840	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.972050905 CET	49840	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.972182035 CET	49840	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.972199917 CET	443	49840	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.972213030 CET	49840	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.972219944 CET	443	49840	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.973845005 CET	49844	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.973865032 CET	443	49844	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.973973989 CET	49844	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.973988056 CET	49845	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.974006891 CET	443	49845	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.974113941 CET	49844	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.974116087 CET	49845	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.974127054 CET	443	49844	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:51.974255085 CET	49845	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:51.974270105 CET	443	49845	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:52.698347092 CET	443	49841	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:52.698820114 CET	49841	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:52.698837996 CET	443	49841	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:52.699299097 CET	49841	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:52.699316025 CET	443	49841	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:52.739403009 CET	443	49842	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:52.739999056 CET	49842	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:52.740008116 CET	443	49842	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:52.740458965 CET	49842	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:52.740463018 CET	443	49842	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.131596088 CET	443	49841	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.135093927 CET	443	49841	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.135153055 CET	443	49841	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.135155916 CET	49841	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.135235071 CET	49841	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.135289907 CET	49841	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.135303974 CET	443	49841	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.135318041 CET	49841	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.135324001 CET	443	49841	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.137962103 CET	49846	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.137995005 CET	443	49846	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.138063908 CET	49846	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.138252974 CET	49846	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.138267040 CET	443	49846	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.173342943 CET	443	49842	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.176772118 CET	443	49842	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.176848888 CET	49842	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.176908970 CET	49842	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.176913977 CET	443	49842	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.176923990 CET	49842	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.176928043 CET	443	49842	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.179500103 CET	49847	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.179550886 CET	443	49847	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.179625034 CET	49847	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.179764986 CET	49847	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.179783106 CET	443	49847	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.983217955 CET	443	49843	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.983336926 CET	443	49844	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.983716011 CET	49843	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.983736992 CET	443	49843	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.983834028 CET	49844	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.983848095 CET	443	49844	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.984266996 CET	49843	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.984272957 CET	443	49843	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.984321117 CET	49844	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.984325886 CET	443	49844	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.984349966 CET	443	49845	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.984635115 CET	49845	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.984682083 CET	443	49845	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:53.985018015 CET	49845	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:53.985028028 CET	443	49845	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.474826097 CET	443	49843	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.474890947 CET	443	49843	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.474965096 CET	49843	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.474967003 CET	443	49844	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.475080967 CET	443	49845	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.475181103 CET	49843	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.475199938 CET	443	49843	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.475209951 CET	49843	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.475217104 CET	443	49843	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.478034019 CET	443	49844	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.478080988 CET	49844	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.478153944 CET	443	49845	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.478209972 CET	49848	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.478213072 CET	49845	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.478230953 CET	443	49845	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.478252888 CET	49844	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.478255987 CET	443	49848	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.478274107 CET	443	49844	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.478281975 CET	49845	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.478286028 CET	49844	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.478291988 CET	443	49844	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.478342056 CET	49848	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.478461027 CET	49845	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.478482962 CET	443	49845	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.478494883 CET	49845	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.478499889 CET	443	49845	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.479420900 CET	49848	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.479437113 CET	443	49848	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.481276989 CET	49849	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.481319904 CET	443	49849	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.481405020 CET	49849	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.481543064 CET	49849	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.481559038 CET	443	49849	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.481561899 CET	49850	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.481571913 CET	443	49850	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:54.481637955 CET	49850	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.481803894 CET	49850	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:54.481817961 CET	443	49850	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.166567087 CET	443	49846	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.167119980 CET	49846	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.167135000 CET	443	49846	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.167591095 CET	49846	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.167598963 CET	443	49846	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.372266054 CET	443	49847	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.372750998 CET	49847	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.372801065 CET	443	49847	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.373203039 CET	49847	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.373215914 CET	443	49847	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.691416025 CET	443	49846	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.692063093 CET	443	49846	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.692167044 CET	49846	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.692188025 CET	49846	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.692210913 CET	443	49846	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.692222118 CET	49846	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.692229033 CET	443	49846	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.695126057 CET	49851	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.695171118 CET	443	49851	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.695244074 CET	49851	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.695365906 CET	49851	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.695382118 CET	443	49851	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.843910933 CET	443	49847	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.843983889 CET	443	49847	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.844196081 CET	49847	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.844316959 CET	49847	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.844345093 CET	443	49847	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.844357014 CET	49847	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.844363928 CET	443	49847	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.847393036 CET	49852	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.847424984 CET	443	49852	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:55.847490072 CET	49852	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.847646952 CET	49852	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:55.847657919 CET	443	49852	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:56.493019104 CET	443	49848	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:56.493527889 CET	49848	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:56.493561983 CET	443	49848	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:56.494259119 CET	443	49849	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:56.494636059 CET	49848	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:56.494643927 CET	443	49848	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:56.498358011 CET	49849	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:56.498383045 CET	443	49849	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:56.499157906 CET	49849	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:56.499164104 CET	443	49849	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:56.526837111 CET	443	49850	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:56.527561903 CET	49850	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:56.527576923 CET	443	49850	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:56.527964115 CET	49850	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:56.527971029 CET	443	49850	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.001796961 CET	443	49848	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.002419949 CET	443	49849	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.002459049 CET	443	49849	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.002511024 CET	443	49849	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.002520084 CET	49849	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.002594948 CET	49849	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.002732038 CET	49849	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.002748966 CET	443	49849	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.002759933 CET	49849	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.002764940 CET	443	49849	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.004837990 CET	443	49848	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.004921913 CET	49848	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.004982948 CET	49848	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.005001068 CET	443	49848	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.005022049 CET	49848	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.005031109 CET	443	49848	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.005903006 CET	49853	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.005944014 CET	443	49853	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.006019115 CET	49853	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.006175995 CET	49853	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.006192923 CET	443	49853	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.007061005 CET	49854	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.007103920 CET	443	49854	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.007167101 CET	49854	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.007316113 CET	49854	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.007328987 CET	443	49854	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.012878895 CET	443	49850	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.012959957 CET	443	49850	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.013022900 CET	49850	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.013108969 CET	49850	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.013123035 CET	443	49850	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.013134003 CET	49850	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.013138056 CET	443	49850	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.015183926 CET	49855	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.015197039 CET	443	49855	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.015288115 CET	49855	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.015415907 CET	49855	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.015429974 CET	443	49855	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.603480101 CET	443	49851	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.604083061 CET	49851	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.604115963 CET	443	49851	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.604654074 CET	49851	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.604660034 CET	443	49851	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.784460068 CET	443	49852	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.785044909 CET	49852	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.785075903 CET	443	49852	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:57.785535097 CET	49852	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:57.785540104 CET	443	49852	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.079248905 CET	443	49851	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.079385996 CET	443	49851	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.079458952 CET	443	49851	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.079454899 CET	49851	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.079514027 CET	49851	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.079653025 CET	49851	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.079675913 CET	443	49851	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.079689980 CET	49851	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.079695940 CET	443	49851	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.082705975 CET	49856	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.082758904 CET	443	49856	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.082856894 CET	49856	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.083023071 CET	49856	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.083038092 CET	443	49856	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.278405905 CET	443	49852	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.278496027 CET	443	49852	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.278577089 CET	49852	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.278803110 CET	49852	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.278824091 CET	443	49852	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.278836012 CET	49852	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.278841972 CET	443	49852	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.281970978 CET	49857	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.281994104 CET	443	49857	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.282090902 CET	49857	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.282296896 CET	49857	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.282314062 CET	443	49857	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.922174931 CET	443	49853	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.922264099 CET	443	49854	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.922900915 CET	49853	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.922920942 CET	49854	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.922928095 CET	443	49853	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.922952890 CET	443	49854	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.923419952 CET	49853	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.923425913 CET	443	49853	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.923439980 CET	49854	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.923445940 CET	443	49854	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.932764053 CET	443	49855	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.933296919 CET	49855	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.933310032 CET	443	49855	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.933685064 CET	49855	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:58.933691025 CET	443	49855	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:58.949933052 CET	443	49832	142.250.181.68	192.168.2.5
Dec 9, 2024 11:36:58.949990034 CET	443	49832	142.250.181.68	192.168.2.5
Dec 9, 2024 11:36:58.950051069 CET	49832	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:36:59.354883909 CET	443	49854	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.355222940 CET	443	49853	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.358726978 CET	443	49854	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.358812094 CET	49854	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.358858109 CET	49854	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.358880043 CET	443	49854	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.358891010 CET	49854	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.358896971 CET	443	49854	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.358931065 CET	443	49853	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.358983040 CET	49853	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.358994961 CET	443	49853	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.359054089 CET	49853	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.359256983 CET	49853	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.359275103 CET	443	49853	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.359292984 CET	49853	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.359297991 CET	443	49853	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.361994982 CET	49859	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.362004042 CET	49858	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.362020969 CET	443	49859	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.362027884 CET	443	49858	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.362123966 CET	49859	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.362287045 CET	49858	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.362287045 CET	49858	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.362293005 CET	49859	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.362304926 CET	443	49859	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.362313986 CET	443	49858	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.365667105 CET	443	49855	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.369316101 CET	443	49855	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.369389057 CET	443	49855	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.369410992 CET	49855	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.369467974 CET	49855	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.369498014 CET	49855	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.369503975 CET	443	49855	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.369529963 CET	49855	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.369534016 CET	443	49855	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.371994972 CET	49860	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.372041941 CET	443	49860	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.372111082 CET	49860	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.372231960 CET	49860	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.372246027 CET	443	49860	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.431005955 CET	49832	443	192.168.2.5	142.250.181.68
Dec 9, 2024 11:36:59.431041956 CET	443	49832	142.250.181.68	192.168.2.5
Dec 9, 2024 11:36:59.808635950 CET	443	49856	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.809472084 CET	49856	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.809499979 CET	443	49856	13.107.246.63	192.168.2.5
Dec 9, 2024 11:36:59.810005903 CET	49856	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:36:59.810013056 CET	443	49856	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.024554014 CET	443	49857	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.025037050 CET	49857	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.025063992 CET	443	49857	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.025469065 CET	49857	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.025474072 CET	443	49857	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.320053101 CET	443	49856	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.323214054 CET	443	49856	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.323329926 CET	49856	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.323376894 CET	49856	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.323376894 CET	49856	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.323400021 CET	443	49856	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.323415995 CET	443	49856	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.326263905 CET	49861	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.326324940 CET	443	49861	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.326433897 CET	49861	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.326601028 CET	49861	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.326616049 CET	443	49861	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.519787073 CET	443	49857	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.519815922 CET	443	49857	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.519864082 CET	443	49857	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.519916058 CET	49857	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.519948959 CET	49857	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.520170927 CET	49857	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.520195007 CET	443	49857	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.520205975 CET	49857	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.520211935 CET	443	49857	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.523112059 CET	49862	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.523150921 CET	443	49862	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:00.523231030 CET	49862	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.526937008 CET	49862	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:00.526953936 CET	443	49862	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:01.543272018 CET	443	49859	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:01.543509007 CET	443	49858	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:01.543842077 CET	49859	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:01.543859959 CET	443	49859	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:01.544068098 CET	49858	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:01.544092894 CET	443	49858	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:01.544555902 CET	49859	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:01.544564962 CET	443	49859	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:01.544779062 CET	49858	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:01.544789076 CET	443	49858	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:01.578958035 CET	443	49860	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:01.579427958 CET	49860	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:01.579446077 CET	443	49860	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:01.579895020 CET	49860	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:01.579900026 CET	443	49860	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.001920938 CET	443	49859	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.002003908 CET	443	49859	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.002186060 CET	443	49858	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.002266884 CET	443	49858	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.002300978 CET	49859	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.002355099 CET	49858	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.002381086 CET	49859	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.002403021 CET	443	49859	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.002414942 CET	49859	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.002420902 CET	443	49859	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.002523899 CET	49858	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.002551079 CET	443	49858	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.002568007 CET	49858	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.002578020 CET	443	49858	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.005568981 CET	49863	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.005614996 CET	443	49863	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.005651951 CET	49864	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.005691051 CET	443	49864	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.005701065 CET	49863	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.005745888 CET	49864	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.005906105 CET	49864	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.005912066 CET	49863	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.005922079 CET	443	49864	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.005928040 CET	443	49863	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.060631037 CET	443	49860	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.063934088 CET	443	49860	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.064106941 CET	49860	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.064361095 CET	49860	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.064378023 CET	443	49860	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.064388990 CET	49860	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.064394951 CET	443	49860	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.067512035 CET	49865	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.067550898 CET	443	49865	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.067646980 CET	49865	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.067837954 CET	49865	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.067852974 CET	443	49865	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.663644075 CET	443	49861	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.664410114 CET	49861	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.664418936 CET	443	49861	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.664887905 CET	49861	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.664891958 CET	443	49861	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.930160999 CET	443	49862	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.930824995 CET	49862	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.930861950 CET	443	49862	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:02.931269884 CET	49862	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:02.931277037 CET	443	49862	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.164509058 CET	443	49861	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.164535999 CET	443	49861	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.164576054 CET	443	49861	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.164623022 CET	49861	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.164669037 CET	49861	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.164918900 CET	49861	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.164922953 CET	443	49861	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.164935112 CET	49861	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.164937973 CET	443	49861	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.167849064 CET	49866	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.167874098 CET	443	49866	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.167956114 CET	49866	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.168133020 CET	49866	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.168145895 CET	443	49866	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.523302078 CET	443	49862	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.523396015 CET	443	49862	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.523525000 CET	49862	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.523961067 CET	49862	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.523982048 CET	443	49862	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.523993015 CET	49862	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.523998976 CET	443	49862	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.526809931 CET	49867	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.526846886 CET	443	49867	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:03.526946068 CET	49867	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.527070999 CET	49867	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:03.527086020 CET	443	49867	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.157449007 CET	443	49863	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.157891035 CET	443	49864	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.158318043 CET	49863	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.158348083 CET	443	49863	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.158476114 CET	49864	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.158505917 CET	443	49864	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.158833027 CET	49864	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.158839941 CET	443	49864	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.159010887 CET	49863	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.159023046 CET	443	49863	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.617233992 CET	443	49865	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.620649099 CET	49865	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.620670080 CET	443	49865	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.621210098 CET	49865	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.621216059 CET	443	49865	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.638396978 CET	443	49863	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.639158010 CET	443	49863	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.639215946 CET	443	49863	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.639223099 CET	49863	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.639278889 CET	49863	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.639333963 CET	49863	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.639357090 CET	443	49863	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.639369011 CET	49863	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.639374971 CET	443	49863	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.639450073 CET	443	49864	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.639519930 CET	443	49864	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.639575005 CET	49864	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.640321970 CET	49864	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.640346050 CET	443	49864	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.640361071 CET	49864	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.640367031 CET	443	49864	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.649771929 CET	49868	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.649825096 CET	443	49868	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.649892092 CET	49868	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.653398037 CET	49868	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.653434992 CET	443	49868	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.654287100 CET	49869	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.654325962 CET	443	49869	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:04.654406071 CET	49869	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.654495955 CET	49869	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:04.654509068 CET	443	49869	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.050710917 CET	443	49865	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.056440115 CET	443	49865	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.056565046 CET	49865	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.056668997 CET	49865	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.056668997 CET	49865	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.056690931 CET	443	49865	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.056718111 CET	443	49865	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.059600115 CET	49870	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.059634924 CET	443	49870	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.059727907 CET	49870	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.059921026 CET	49870	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.059940100 CET	443	49870	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.151686907 CET	443	49866	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.152257919 CET	49866	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.152292013 CET	443	49866	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.152726889 CET	49866	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.152731895 CET	443	49866	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.336800098 CET	443	49867	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.337414026 CET	49867	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.337430000 CET	443	49867	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.338015079 CET	49867	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.338018894 CET	443	49867	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.585244894 CET	443	49866	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.588602066 CET	443	49866	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.588695049 CET	49866	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.588788986 CET	49866	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.588820934 CET	443	49866	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.588834047 CET	49866	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.588840961 CET	443	49866	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.592122078 CET	49871	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.592160940 CET	443	49871	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.592438936 CET	49871	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.592689991 CET	49871	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.592703104 CET	443	49871	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.769999027 CET	443	49867	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.773674965 CET	443	49867	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.773725033 CET	443	49867	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.773765087 CET	49867	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.773853064 CET	49867	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.773927927 CET	49867	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.773927927 CET	49867	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.773948908 CET	443	49867	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.773957014 CET	443	49867	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.777131081 CET	49872	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.777154922 CET	443	49872	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:05.777225018 CET	49872	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.777419090 CET	49872	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:05.777434111 CET	443	49872	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:06.180124998 CET	443	49869	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:06.180737972 CET	49869	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:06.180756092 CET	443	49869	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:06.181503057 CET	49869	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:06.181509972 CET	443	49869	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:06.370140076 CET	443	49868	13.107.246.63	192.168.2.5
Dec 9, 2024 11:37:06.370837927 CET	49868	443	192.168.2.5	13.107.246.63
Dec 9, 2024 11:37:06.370857954 CET	443	49868	13.107.246.63	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 11:35:43.145210981 CET	53	49751	1.1.1.1	192.168.2.5
Dec 9, 2024 11:35:43.158655882 CET	53	58750	1.1.1.1	192.168.2.5
Dec 9, 2024 11:35:45.870408058 CET	53	65142	1.1.1.1	192.168.2.5
Dec 9, 2024 11:35:47.493983030 CET	65266	53	192.168.2.5	1.1.1.1
Dec 9, 2024 11:35:47.494055986 CET	52886	53	192.168.2.5	1.1.1.1
Dec 9, 2024 11:35:47.630661011 CET	53	52886	1.1.1.1	192.168.2.5
Dec 9, 2024 11:35:47.631666899 CET	53	65266	1.1.1.1	192.168.2.5
Dec 9, 2024 11:35:48.494611979 CET	62077	53	192.168.2.5	1.1.1.1
Dec 9, 2024 11:35:48.494812965 CET	58478	53	192.168.2.5	1.1.1.1
Dec 9, 2024 11:35:48.772217989 CET	53	62077	1.1.1.1	192.168.2.5
Dec 9, 2024 11:35:48.773286104 CET	53	58478	1.1.1.1	192.168.2.5
Dec 9, 2024 11:35:51.117192984 CET	53980	53	192.168.2.5	1.1.1.1
Dec 9, 2024 11:35:51.117492914 CET	49525	53	192.168.2.5	1.1.1.1
Dec 9, 2024 11:35:51.254553080 CET	53	49525	1.1.1.1	192.168.2.5
Dec 9, 2024 11:35:51.257678986 CET	53	53980	1.1.1.1	192.168.2.5
Dec 9, 2024 11:36:02.834302902 CET	53	64174	1.1.1.1	192.168.2.5
Dec 9, 2024 11:36:21.849093914 CET	53	61880	1.1.1.1	192.168.2.5
Dec 9, 2024 11:36:42.961100101 CET	53	51893	1.1.1.1	192.168.2.5
Dec 9, 2024 11:36:44.238919020 CET	53	54063	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 9, 2024 11:35:47.493983030 CET	192.168.2.5	1.1.1.1	0x7e8f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:35:47.494055986 CET	192.168.2.5	1.1.1.1	0xaae1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 9, 2024 11:35:48.494611979 CET	192.168.2.5	1.1.1.1	0xc1a0	Standard query (0)	www.cvmaker.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:35:48.494812965 CET	192.168.2.5	1.1.1.1	0x7fc3	Standard query (0)	www.cvmaker.com	65	IN (0x0001)	false
Dec 9, 2024 11:35:51.117192984 CET	192.168.2.5	1.1.1.1	0x4150	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:35:51.117492914 CET	192.168.2.5	1.1.1.1	0x132d	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 9, 2024 11:35:47.630661011 CET	1.1.1.1	192.168.2.5	0xaae1	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 9, 2024 11:35:47.631666899 CET	1.1.1.1	192.168.2.5	0x7e8f	No error (0)	www.google.com	142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:35:48.772217989 CET	1.1.1.1	192.168.2.5	0xc1a0	No error (0)	www.cvmaker.com	172.67.69.175	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:35:48.772217989 CET	1.1.1.1	192.168.2.5	0xc1a0	No error (0)	www.cvmaker.com	104.26.10.143	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:35:48.772217989 CET	1.1.1.1	192.168.2.5	0xc1a0	No error (0)	www.cvmaker.com	104.26.11.143	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:35:48.773286104 CET	1.1.1.1	192.168.2.5	0x7fc3	No error (0)	www.cvmaker.com		65	IN (0x0001)	false
Dec 9, 2024 11:35:51.257678986 CET	1.1.1.1	192.168.2.5	0x4150	No error (0)	a.nel.cloudflare.com	35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.cvmaker.com

https:

fs.microsoft.com

a.nel.cloudflare.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	88.221.168.226	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:35:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-09 10:35:49 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=141186 Date: Mon, 09 Dec 2024 10:35:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	172.67.69.175	443	6336	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:35:50 UTC	690	OUT	GET /assets/images/email/logo_@2x.png HTTP/1.1 Host: www.cvmaker.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 10:35:50 UTC	913	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:35:50 GMT Content-Type: image/png Content-Length: 4894 Connection: close last-modified: Thu, 17 Feb 2022 15:23:46 GMT expires: Mon, 01 Dec 2025 09:29:31 GMT Cache-Control: public, max-age=31536000 retry-after: 28800 CF-Cache-Status: HIT Age: 695179 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lly9FbahK8R7ikBhtIYWOm2X0IgTR4DAkSgNkY4TSKmHlbOvsd37xoC%2BsWfYjKqIWdAqw40TsZ6I37tpzQ9jRJOOiXKDNmKQQmKamdKaYhmd4HnvkvZv4vxVW2oQqj6AFw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef459c7483d43ef-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1592&min_rtt=1579&rtt_var=618&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1268&delivery_rate=1733966&cwnd=233&unsent_bytes=0&cid=5f6a2bb0c7a491b3&ts=462&x=0"
2024-12-09 10:35:50 UTC	456	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 3c 08 06 00 00 00 17 07 63 a4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 12 d5 49 44 41 54 78 9c ed 9d 79 f8 5d e3 b5 c7 3f eb 24 42 8c 55 c4 50 53 d5 6d 55 71 cd 31 54 53 d7 54 dc 88 a0 8a 52 e5 ba 8f a9 03 ca bd d4 5c b4 bd ae e9 b6 15 f4 4a af 21 ae 2a 8a 26 b4 86 26 21 4d 2a 57 d4 10 94 1a 1e 2a d1 98 89 68 c8 e0 7b ff 78 f7 2f 7e 39 39 fb ec bd de bd cf 90 fc f6 e7 79 ce f3 fc 9e f3 7b df b5 d6 d9 e7 ec b5 df 61 ad f5 42 45 45 45 e9 48 1a 26 1f d7 75 da e6 be 48 ad d3 06 54 54 2c a1 6c ef 6c bf 59 4b ac a8 68 4a e5 00 2b 2a 2a fa 2c 95 03 ac a8 a8 e8 b3 54 0e b0 a2 a2 a2 cf 52 39 c0 8a 8a 8a 3e 4b e5 00 2b 2a 2a fa 2c 95 03 ac a8 a8 e8 b3 54 0e b0 a2 a2 a2 cf 52 39 c0 8a Data Ascii: PNGIHDR@<csBIT\|dIDATxy]?$BUPSmUq1TSTR\J!&&!MWh{x/~99y{aBEEEH&uHTT,llYKhJ+,TR9>K+*,TR9
2024-12-09 10:35:50 UTC	1369	IN	Data Raw: 93 7c e1 c7 01 ab e5 68 3e 0f b8 d6 cc 5e 2e 49 f7 b6 c0 5e 39 9b 4f 34 b3 7b 1b c8 d8 0e 38 05 d8 1a 58 87 8f 1d 5f 83 a6 7a 0c 18 0d 8c 30 b3 19 0e 3b d7 21 5c a3 3d 80 cd 9b e8 00 78 43 d2 6d c0 0d 66 76 7f 5e 1d 39 6c 58 1d 18 0c 6c 97 bc 3e 4b 70 7c 79 fb bf 08 4c 01 c6 01 ff 63 66 b3 cb b2 ad d5 48 3a 0a 58 db d1 65 aa 99 dd ea 90 6f c0 a1 c0 70 82 e3 5b 39 a3 cb 1c 49 53 80 b1 c0 28 33 7b c6 61 5b bd ee 8d 81 03 73 36 1f 6f 66 e3 eb fa d7 80 c3 93 d7 97 58 f4 b7 f9 56 94 51 92 7e 22 e9 1d 67 b9 9f 46 8c 95 d4 b0 6a 86 a4 81 92 3e 72 ca 3b cd fd 81 9a 7f d6 6b 9d fa ef 2e 51 f7 bd 0e bd 4f d4 f5 5d 59 d2 f5 4e db 7b 98 23 e9 12 49 03 32 ec db 42 d2 2d 92 e6 47 ea 99 22 69 7f 85 1f a9 f7 da 98 a4 6d 24 9d 2f e9 f1 48 fd 69 bc 21 e9 6c 85 11 73 34 92 Data Ascii: \|h>^.I^9O4{8X_z0;!\=xCmfv^9lXl>Kp\|yLcfH:Xeop[9IS(3{a[s6ofXVQ~"gFj>r;k.QO]YN{#I2B-G"im$/Hi!ls4
2024-12-09 10:35:50 UTC	1369	IN	Data Raw: 2f 69 33 f9 bf 6f 49 fa 4d 0e d9 a5 04 42 4b ba 33 c2 be a7 14 c2 5a d2 6c ab 49 7a ce 29 f3 41 a5 dc 9b 75 b2 4d d2 48 a7 ec 77 d5 e0 fb 56 b1 80 f7 3b 14 fc 4c 76 64 84 a4 21 05 14 bd 25 e9 9b 99 4a d2 75 af a0 10 b9 7d 93 a4 6b 94 f2 43 96 f4 15 a7 5d f3 24 2d eb b4 65 cd 88 cf 9e fa 43 2b 82 e2 1d e0 83 ca 48 e3 92 b4 8e a4 67 23 e5 f7 30 51 d2 4a 19 7a d6 97 f4 42 a4 fc 5d 9b c8 5d 56 d2 60 45 a4 d1 35 90 b5 bc fc 4e 70 96 32 6e 2c 95 e0 00 25 1d ef 94 21 49 ef 2b c4 c3 35 b3 6d 0f a7 cc 17 25 e5 0e ba 56 70 b0 13 9d 3a 16 d9 85 56 bc 03 3c 31 af ad 3d 8a fe 3b 52 d1 34 b5 69 57 4c 52 3f 05 87 e3 c1 b5 bb 25 e9 bb 4e f9 57 b5 f0 f3 c6 38 c0 59 0a c1 eb 79 e4 0f 56 7c 1e ef 4c e5 5c 63 95 b4 63 a4 8e 23 8b 5d c1 fc 48 da 3a c2 be 4f 67 c8 2c e4 00 15 Data Ascii: /i3oIMBK3ZlIz)AuMHwV;Lvd!%Ju}kC]$-eC+Hg#0QJzB]]V`E5Np2n,%!I+5m%Vp:V<1=;R4iWLR?%NW8YyV\|L\cc#]H:Og,
2024-12-09 10:35:50 UTC	1369	IN	Data Raw: 11 f2 34 bd 1b 21 db 4a da bb 05 f6 2c 40 d2 39 f8 73 22 b3 18 da 13 34 9a 3c fd 07 3b fa 56 d3 df 0e 91 04 f0 7a 46 68 d3 f0 17 6c 98 9a dd a4 ad cc 06 86 12 77 12 dd 85 4a af 85 e9 2a 16 40 38 b2 b6 1d 07 62 75 84 5a b2 96 e7 2e 77 43 18 6a 97 7e 61 14 8a 29 8e 00 ce 2e 5b 36 21 db 63 97 e4 ef fd c9 1f 52 33 0b b8 b3 05 f6 54 e4 c3 1b 79 30 3a ed 00 f0 26 94 75 3a 59 59 1c 6a 66 4f 03 e7 03 33 b3 1a d7 b1 1a 61 5a df 88 fb 9c b2 96 03 8e 76 f6 59 6c e8 c9 67 bc 2e a2 ef ba f8 cb 2f 35 25 d9 f0 18 03 1c eb e8 f6 01 e1 ec 91 bc f4 4c 7b 3d eb 7f 37 35 9b 4a 55 b4 1c 6f b6 52 4c a0 7a d1 3c d4 32 b9 c8 cc 7e 0d 90 54 de b9 20 42 c6 a9 92 d6 6a f0 fe 98 08 59 e7 28 a3 ca f8 e2 4a 8f 03 1c 43 5c 0c ce 61 92 6e 54 09 65 e1 25 ed 4c 28 9f b3 a7 b3 eb 69 c0 0d Data Ascii: 4!J,@9s"4<;VzFhlwJ*@8buZ.wCj~a).[6!cR3Ty0:&u:YYjfO3aZvYlg./5%L{=75JUoRLz<2~T BjY(JC\anTe%L(i
2024-12-09 10:35:50 UTC	331	IN	Data Raw: bf db 75 5d 8f 89 e8 b3 31 21 08 b9 21 66 36 37 99 f9 7d 9a 10 a8 1c 53 49 ba 19 2f 00 df 07 d6 34 b3 93 9a b4 6b f9 35 f4 9e af 8b 99 bd 04 7c 4b d2 e9 84 2a bd 07 02 bb 13 57 4e e8 25 42 c5 e7 51 65 06 1c 9b d9 dd 92 f6 02 4e c1 17 e4 fa 36 70 62 97 14 3e 1d 85 2f d6 2b 36 64 e7 3a 7c 3f 9c 58 3d d7 e2 db b9 cc dc d1 37 b3 bf 10 d2 de 36 25 84 b9 7c 15 58 3e a3 db 1c c2 b1 9a a3 92 11 54 9a ec b9 84 e3 26 af 24 e4 bb 0f 23 c4 d3 ad cd c7 f7 cd bb 84 73 2c 9e 24 cc 3a 7a 57 49 1f 4d 08 bf c9 1b 63 17 35 eb 30 b3 c9 92 8e 26 c4 35 e6 d5 35 9f 10 bc 9c 25 fb 7d 42 6d c1 4b 81 2d 81 21 84 f3 93 77 c4 57 3d 47 84 11 f5 18 e0 4e c7 bd fe 4b f2 1f 83 20 22 72 9c 4b 89 c2 4e aa ab ec 41 b8 38 6b 10 ce 5c 58 3d 79 ad 42 c8 3b 7c 3b 79 bd 4c 08 6a bd 27 f9 01 57 Data Ascii: u]1!!f67}SI/4k5\|K*WN%BQeN6pb>/+6d:\|?X=76%\|X>T&$#s,$:zWIMc50&55%}BmK-!wW=GNK "rKNA8k\X=yB;\|;yLj'W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	172.67.69.175	443	6336	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:35:50 UTC	618	OUT	GET /favicon.ico HTTP/1.1 Host: www.cvmaker.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cvmaker.com/assets/images/email/logo_@2x.png Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 10:35:51 UTC	845	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 10:35:50 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding retry-after: 28800 Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q4mzT4I9mSQXM%2Fzi3clbGi4D1nmsxESVIyUGB%2Bee8abecDBN3fOh2n7ql%2FTZjEAR%2BfzO56fp2QCy2ArSk2kjXmGE8kB5RJpU%2FsYghAhljSYAZ9379qa72v9mz7MmcHRFAA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef459c9a8fe0fa7-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1484&min_rtt=1480&rtt_var=564&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1196&delivery_rate=1926121&cwnd=220&unsent_bytes=0&cid=ec670ff7cbd0234b&ts=1130&x=0"
2024-12-09 10:35:51 UTC	524	IN	Data Raw: 32 32 34 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 Data Ascii: 224<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Ch
2024-12-09 10:35:51 UTC	31	IN	Data Raw: 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 0d 0a Data Ascii: ome friendly error page -->
2024-12-09 10:35:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	88.221.168.226	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:35:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-09 10:35:52 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=40175 Date: Mon, 09 Dec 2024 10:35:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-09 10:35:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	35.190.80.1	443	6336	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:35:52 UTC	542	OUT	OPTIONS /report/v4?s=Q4mzT4I9mSQXM%2Fzi3clbGi4D1nmsxESVIyUGB%2Bee8abecDBN3fOh2n7ql%2FTZjEAR%2BfzO56fp2QCy2ArSk2kjXmGE8kB5RJpU%2FsYghAhljSYAZ9379qa72v9mz7MmcHRFAA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.cvmaker.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 10:35:52 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 09 Dec 2024 10:35:52 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	35.190.80.1	443	6336	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:35:54 UTC	484	OUT	POST /report/v4?s=Q4mzT4I9mSQXM%2Fzi3clbGi4D1nmsxESVIyUGB%2Bee8abecDBN3fOh2n7ql%2FTZjEAR%2BfzO56fp2QCy2ArSk2kjXmGE8kB5RJpU%2FsYghAhljSYAZ9379qa72v9mz7MmcHRFAA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 452 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 10:35:54 UTC	452	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 30 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 76 6d 61 6b 65 72 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 65 6d 61 69 6c 2f 6c 6f 67 6f 5f 40 32 78 2e 70 6e 67 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 36 39 2e 31 37 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 Data Ascii: [{"age":0,"body":{"elapsed_time":608,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.cvmaker.com/assets/images/email/logo_@2x.png","sampling_fraction":1.0,"server_ip":"172.67.69.175","status_code":404,"type":"http.error"
2024-12-09 10:35:54 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 09 Dec 2024 10:35:54 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:00 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=o+H6G+5fg4zlcln&MD=WCw2WOPk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-09 10:36:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f4942b75-4d02-4a14-9bf1-68e6553de40a MS-RequestId: 6c00a3a6-1912-4a8a-ba97-5b2207e0eb58 MS-CV: ObbueQSCGUqWCmGA.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 09 Dec 2024 10:36:00 GMT Connection: close Content-Length: 24490
2024-12-09 10:36:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-09 10:36:00 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49722	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:00 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:01 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:00 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 08 Dec 2024 17:57:40 GMT ETag: "0x8DD17B1CF2A0A7C" x-ms-request-id: df7ee72c-101e-0034-6bad-4996ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103600Z-r1cf579d778t76vqhC1EWRdx4w000000021g000000003hmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:01 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-09 10:36:01 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-09 10:36:01 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-09 10:36:01 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-09 10:36:01 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-09 10:36:01 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-09 10:36:01 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-09 10:36:01 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-09 10:36:01 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-09 10:36:01 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:03 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:03 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: c0354b8f-f01e-0071-139a-49431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103603Z-r1cf579d778469knhC1EWR2gqc00000000t0000000004ubk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:04 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:03 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:04 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:03 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: cb80336d-801e-0078-59bd-47bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103603Z-r1cf579d778qgtz2hC1EWRmgks00000007vg000000004m8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:04 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:03 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:03 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 937d31be-301e-006e-4fe0-49f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103603Z-r1cf579d778l2x6lhC1EWRsptc000000013g0000000018bb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:04 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:03 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:03 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 3fcd35f4-e01e-0052-4b02-48d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103603Z-r1cf579d778w59f9hC1EWRze6w0000000890000000005w6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:04 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:03 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:03 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 2b116ba0-201e-0051-0503-487340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103603Z-r1cf579d778qgtz2hC1EWRmgks00000007xg0000000035r0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:04 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:05 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:06 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 75167780-601e-000d-444b-492618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103606Z-r1cf579d778j4j5fhC1EWR3ge800000001r0000000000vb4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:06 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:05 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:06 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 3de6f1c3-b01e-003d-6e01-48d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103606Z-r1cf579d778w59f9hC1EWRze6w00000008dg000000001ds1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:06 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:05 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:05 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1e9ba10d-901e-0029-2907-48274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103605Z-r1cf579d778bb9vvhC1EWRs95400000007qg000000002quk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:06 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:05 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: c8d44b57-401e-0067-6578-4909c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103606Z-r1cf579d778dndrdhC1EWR4b2400000007sg000000002s3c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:05 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:06 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1496b81c-e01e-0003-0d90-490fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103606Z-r1cf579d778j4j5fhC1EWR3ge800000001p0000000002fgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:06 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:07 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:08 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: c4bc35ba-101e-007a-7206-48047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103608Z-r1cf579d778x776bhC1EWRdk8000000008600000000011rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:08 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:07 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: b569e8fb-501e-008c-5305-48cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103608Z-r1cf579d778bb9vvhC1EWRs95400000007t0000000000tys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:07 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 682fb484-401e-0083-5904-48075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103608Z-r1cf579d778lntp7hC1EWR9gg400000007fg00000000423y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:08 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 22943564-b01e-0021-0b03-48cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103608Z-r1cf579d778x776bhC1EWRdk80000000082g000000003esa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:08 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:09 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 15aef412-b01e-0070-4ab4-491cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103609Z-r1cf579d778j4j5fhC1EWR3ge800000001pg000000001y6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:10 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: fc439136-701e-0053-5f66-493a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103610Z-r1cf579d7789jf56hC1EWRu5880000000340000000005ce7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:10 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 55eac1c3-901e-0029-5715-49274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103610Z-r1cf579d7782v2q5hC1EWRt9bw00000002xg000000000sgn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:10 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 1f14184f-601e-0050-3802-482c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103610Z-r1cf579d778t5c2lhC1EWRce3w00000008t0000000002xnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:10 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: fff301c7-601e-0097-4606-48f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103610Z-r1cf579d7789trgthC1EWRkkfc00000008sg000000003dt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:11 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:11 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ad3e0835-e01e-0033-5701-484695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103611Z-r1cf579d778z4wflhC1EWRa3h00000000880000000000w3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:11 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:12 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:12 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d23be26f-101e-0046-5e0d-4991b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103612Z-r1cf579d778t76vqhC1EWRdx4w00000002500000000015h7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:12 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:12 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bd44ec9f-201e-003f-366e-496d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103612Z-r1cf579d778pftsbhC1EWRa0gn00000002pg0000000025tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:12 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: ebc14d87-b01e-0070-664c-491cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103612Z-r1cf579d778d5zkmhC1EWRk6h800000008g0000000004wgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:12 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:12 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4232bea2-001e-008d-6044-49d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103612Z-r1cf579d778469knhC1EWR2gqc00000000yg000000000m62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:12 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:13 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 7ebc7efb-d01e-00ad-787a-49e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103613Z-r1cf579d778j4j5fhC1EWR3ge800000001s00000000001t7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:14 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:14 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 7b99b195-101e-0017-7009-4847c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103614Z-r1cf579d7789trgthC1EWRkkfc00000008qg0000000059fq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:14 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49751	13.107.246.63	443	6336	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:14 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:14 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: b10a885e-c01e-00a1-42cd-497e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103614Z-r1cf579d778j4j5fhC1EWR3ge800000001p0000000002fqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:14 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:14 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 09188c3a-a01e-0021-2702-48814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103614Z-r1cf579d778xr2r4hC1EWRqvfs000000084g000000002na8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:14 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 90f2e2a0-001e-0014-5807-485151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103614Z-r1cf579d778bb9vvhC1EWRs95400000007mg000000004fxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:15 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 75599bc5-d01e-008e-7c03-48387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103616Z-r1cf579d778x776bhC1EWRdk800000000840000000002dpx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:16 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: a17cc0cf-001e-0079-79ae-4912e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103616Z-r1cf579d778mpnwnhC1EWRfgng00000001ug000000003qka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:16 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: e333ec31-201e-003f-1d06-486d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103616Z-r1cf579d778x776bhC1EWRdk800000000850000000001ru9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:16 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:16 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 1e88822f-901e-0029-0201-48274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103616Z-r1cf579d7788pwqzhC1EWRrpd800000008ag0000000048b7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:16 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:16 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:17 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a32a4087-901e-0083-2b4e-49bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103617Z-r1cf579d7782v2q5hC1EWRt9bw00000002v0000000002eaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:17 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 759a56cd-c01e-0046-631d-492db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103618Z-r1cf579d7789jf56hC1EWRu588000000039g0000000017zt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:18 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:18 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: d196cbd9-901e-008f-5d03-4867a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103618Z-r1cf579d778z4wflhC1EWRa3h000000008900000000001f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:19 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:18 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e267231f-301e-0099-3103-486683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103618Z-r1cf579d778qlpkrhC1EWRpfc800000008vg0000000010sf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:19 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:18 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:19 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 2f0750f4-201e-0000-61a2-49a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103619Z-r1cf579d778l2x6lhC1EWRsptc000000013g0000000018t2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:19 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:18 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:19 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 6d6f58af-101e-0028-33a4-498f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103619Z-r1cf579d778j4j5fhC1EWR3ge800000001rg000000000bna x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:19 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:20 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:20 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 32c7b88d-b01e-003e-5b01-488e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103620Z-r1cf579d7788pwqzhC1EWRrpd800000008e0000000001a69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:20 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:20 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:21 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: d23b658c-101e-000b-2402-485e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103621Z-r1cf579d778dndrdhC1EWR4b2400000007v0000000000ywr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:21 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:20 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 30883f21-801e-00a0-1802-482196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103621Z-r1cf579d778x776bhC1EWRdk800000000870000000000q31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:20 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:21 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: babd51c3-501e-008f-1378-499054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103621Z-r1cf579d778pftsbhC1EWRa0gn00000002mg000000003qh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:21 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:21 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:21 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: f8799778-401e-0064-72cc-4954af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103621Z-r1cf579d778pftsbhC1EWRa0gn00000002r0000000000yf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:21 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:22 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:22 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 836d2ba0-b01e-0070-7302-481cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103622Z-r1cf579d778w59f9hC1EWRze6w00000008ag000000003h7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:22 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:23 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: eee9af6d-a01e-001e-1905-4849ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103623Z-r1cf579d7786c2tshC1EWRr1gc00000007sg00000000263c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:23 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:23 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 32c7c32d-b01e-003e-2b01-488e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103623Z-r1cf579d778w59f9hC1EWRze6w0000000880000000005u7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:23 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:23 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:23 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7b814a2b-101e-0017-4003-4847c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103623Z-r1cf579d778dndrdhC1EWR4b2400000007t0000000002arv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:23 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 45682ef5-801e-0048-7703-48f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103623Z-r1cf579d778z4wflhC1EWRa3h0000000088g000000000d46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:24 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: a7f5343d-701e-001e-5304-48f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103624Z-r1cf579d778qgtz2hC1EWRmgks00000007x0000000003nc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:25 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 6578e9b9-801e-00a3-294a-497cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103625Z-r1cf579d778x776bhC1EWRdk800000000850000000001s2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:25 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: eb0f4028-701e-0021-6d9b-493d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103625Z-r1cf579d778gg9hlhC1EWRh7nw00000000s0000000001r40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:25 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 704c87bc-501e-00a0-2501-489d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103625Z-r1cf579d778qgtz2hC1EWRmgks000000080g000000000z1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:25 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: a75b6259-601e-0084-3701-486b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103625Z-r1cf579d778lntp7hC1EWR9gg400000007gg000000003n0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:26 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90ee9adf-001e-0014-3106-485151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103626Z-r1cf579d778qlpkrhC1EWRpfc800000008s0000000003sbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:27 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1f654f05-501e-008f-5009-489054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103627Z-r1cf579d778qgtz2hC1EWRmgks000000080g000000000z3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:27 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:27 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 90a1454b-001e-0079-3203-4812e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103627Z-r1cf579d778dndrdhC1EWR4b2400000007p000000000505x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:28 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:27 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:27 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: e27c4e9c-301e-0099-680b-486683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103627Z-r1cf579d778w59f9hC1EWRze6w00000008bg000000002y68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:28 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:27 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:27 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 9350bad7-201e-00aa-717e-493928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103627Z-r1cf579d778pftsbhC1EWRa0gn00000002kg000000003ymb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:28 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:28 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 337dc70d-a01e-0053-5e05-488603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103628Z-r1cf579d778t5c2lhC1EWRce3w00000008v0000000001k9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:29 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: c2c382dc-f01e-0000-7f76-49193e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103629Z-r1cf579d778gg9hlhC1EWRh7nw00000000rg000000001rtk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:30 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:29 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:30 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a00703cc-001e-0017-37c7-490c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103630Z-r1cf579d778l2x6lhC1EWRsptc0000000130000000001w2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:30 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:29 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 7e558585-401e-0047-1037-498597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103630Z-r1cf579d778pftsbhC1EWRa0gn00000002mg000000003qsq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:29 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:30 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: a215b4dd-e01e-0071-4e03-4808e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103630Z-r1cf579d778qlpkrhC1EWRpfc800000008t0000000002rtd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:30 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:30 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:31 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:31 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 2750dbad-b01e-003d-064a-49d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103631Z-r1cf579d778l2x6lhC1EWRsptc0000000120000000002b1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-09 10:36:31 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:31 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 4c7743ed-001e-0082-4b03-485880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103632Z-r1cf579d778x776bhC1EWRdk80000000082g000000003f7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:32 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:31 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: dfbdfb26-501e-0016-5926-49181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103632Z-r1cf579d778bb9vvhC1EWRs95400000007sg0000000014zz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:31 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:32 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 83778e64-b01e-0070-6d05-481cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103632Z-r1cf579d778lntp7hC1EWR9gg400000007e0000000005qe6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:32 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:32 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:32 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: f6e8c48a-401e-000a-8008-484a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103632Z-r1cf579d778qlpkrhC1EWRpfc800000008wg000000000bbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:32 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:33 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:33 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 02e14224-e01e-0003-6626-490fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103633Z-r1cf579d7789jf56hC1EWRu5880000000340000000005cwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:33 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:33 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e8b3d2c0-701e-0050-0b05-486767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103634Z-r1cf579d7789trgthC1EWRkkfc00000008tg000000002hw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:34 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:34 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: a2a82b19-a01e-0002-2e1e-495074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103634Z-r1cf579d778t5c2lhC1EWRce3w00000008vg0000000014fq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:34 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 32d5c911-c01e-0079-1289-49e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103634Z-r1cf579d778pftsbhC1EWRa0gn00000002r0000000000yr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:34 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:34 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d2f4848f-f01e-0099-6fbe-499171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103634Z-r1cf579d778469knhC1EWR2gqc00000000u0000000004dww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:34 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:35 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: c868132e-401e-00ac-58ad-490a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103635Z-r1cf579d778mpnwnhC1EWRfgng00000001xg0000000016n2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:36 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:36 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 18148ef3-001e-002b-2504-4899f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103636Z-r1cf579d778w59f9hC1EWRze6w00000008d0000000001yq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:36 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:36 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:36 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:36 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 42d07f15-f01e-0099-5306-489171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103636Z-r1cf579d778z4wflhC1EWRa3h0000000086g000000001szh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:36 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:36 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:36 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0b61f7bb-f01e-0052-4103-489224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103636Z-r1cf579d778x776bhC1EWRdk80000000080g000000004xdu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:36 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:36 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:36 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: eb7920de-b01e-0070-4730-491cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103636Z-r1cf579d778w59f9hC1EWRze6w00000008eg000000000sw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:36 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:37 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:37 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:37 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 5174d810-b01e-003d-4b9a-49d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103637Z-r1cf579d778t76vqhC1EWRdx4w00000002100000000044nb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:37 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:38 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:38 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:38 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 8f2f8f72-401e-008c-26e0-4986c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103638Z-r1cf579d778x776bhC1EWRdk8000000008600000000012du x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:38 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:38 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:38 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:38 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 5de186aa-101e-007a-6c91-49047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103638Z-r1cf579d7782v2q5hC1EWRt9bw00000002s0000000004w4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:38 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:38 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:38 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:38 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 01033cfd-d01e-0014-236d-49ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103638Z-r1cf579d778qlpkrhC1EWRpfc800000008ug000000001q4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:38 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:38 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:38 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 2ca9926f-801e-00a3-36ae-497cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103638Z-r1cf579d778t76vqhC1EWRdx4w00000001z000000000596v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49809	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:38 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=o+H6G+5fg4zlcln&MD=WCw2WOPk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-09 10:36:39 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 07a19f7e-b7bb-42cf-a9ff-80ac80415ba2 MS-RequestId: a636007d-1f39-44b3-b1af-d652a5c0b51f MS-CV: V+bQ4FkjTEu3RgfT.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 09 Dec 2024 10:36:38 GMT Connection: close Content-Length: 30005
2024-12-09 10:36:39 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-09 10:36:39 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:39 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:39 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 8a7a9c83-801e-0078-4106-48bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103639Z-r1cf579d778z4wflhC1EWRa3h000000008400000000033dz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:39 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:40 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3fcff9c6-e01e-0052-0a03-48d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103640Z-r1cf579d778qlpkrhC1EWRpfc800000008r000000000468z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:40 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 09d70899-501e-008c-3f6d-49cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103640Z-r1cf579d778j4j5fhC1EWR3ge800000001mg000000003k60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:40 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:40 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 44286e75-701e-0032-5705-48a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103640Z-r1cf579d778xr2r4hC1EWRqvfs0000000820000000004qg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:40 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 32ce5259-b01e-003e-4804-488e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103640Z-r1cf579d778lntp7hC1EWR9gg400000007kg000000001zfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:41 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:41 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:42 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 1ccbfaf0-201e-0003-3306-48f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103641Z-r1cf579d778dndrdhC1EWR4b2400000007u0000000001e8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:42 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:42 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:43 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 51bfefb4-e01e-001f-6915-491633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103643Z-r1cf579d778l2x6lhC1EWRsptc000000010g0000000039t5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:43 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:42 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:43 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:43 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: fda51452-001e-005a-6630-49c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103643Z-r1cf579d778gg9hlhC1EWRh7nw00000000pg000000002bfa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-09 10:36:43 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:42 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:43 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 46868609-f01e-005d-1c48-4913ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103643Z-r1cf579d778t76vqhC1EWRdx4w00000002200000000037ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:43 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:43 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:43 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 8eb9891a-501e-005b-7103-48d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103643Z-r1cf579d778z4wflhC1EWRa3h0000000086g000000001t2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:44 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:43 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:44 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: e2bfbc9d-f01e-0085-0f03-4888ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103644Z-r1cf579d778w59f9hC1EWRze6w00000008a0000000003wag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:44 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:45 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:45 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 22946db9-b01e-0021-4e03-48cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103645Z-r1cf579d7788pwqzhC1EWRrpd800000008cg000000002gva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:45 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:45 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:45 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 42c4dea6-f01e-0099-6c03-489171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103645Z-r1cf579d778qgtz2hC1EWRmgks00000007xg0000000036np x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:45 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:45 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:45 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9a7d6e1d-d01e-00a1-4e08-4835b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103645Z-r1cf579d7788pwqzhC1EWRrpd80000000890000000005383 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:45 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:45 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:46 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 1dad0878-201e-0071-1606-48ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103646Z-r1cf579d778z4wflhC1EWRa3h0000000083g000000003t6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:46 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:45 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 8332b9fd-c01e-0079-1704-48e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103646Z-r1cf579d778qgtz2hC1EWRmgks00000007z0000000001z8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:47 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:47 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: ce9d0a38-701e-000d-657a-496de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103647Z-r1cf579d778j4j5fhC1EWR3ge800000001r0000000000wbu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:47 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:47 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:47 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 5cbf6155-301e-0051-30cf-4938bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103647Z-r1cf579d7788c742hC1EWRr97n000000028g0000000039ab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:47 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:47 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 32b56396-c01e-0079-117a-49e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103647Z-r1cf579d7789jf56hC1EWRu58800000003ag000000000swt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:48 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:48 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 62ef0171-501e-000a-5a03-480180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103648Z-r1cf579d7789trgthC1EWRkkfc00000008pg000000005mhw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:48 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:48 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:48 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cd880ea1-701e-0098-43c5-49395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103648Z-r1cf579d778j4j5fhC1EWR3ge800000001p0000000002gd0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:48 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:49 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:49 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:49 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d1a1fe13-d01e-00a1-653f-4935b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103649Z-r1cf579d778bb9vvhC1EWRs95400000007m0000000005hu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:49 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:49 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:49 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:49 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 5dd53741-b01e-0053-4993-49cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103649Z-r1cf579d778pftsbhC1EWRa0gn00000002ng0000000030f8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:49 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:49 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:49 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:49 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4c8a77f3-f01e-0020-1a90-49956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103649Z-r1cf579d778l2x6lhC1EWRsptc000000011g0000000036wv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:49 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:50 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:50 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:50 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 566fb8fd-901e-0029-1e48-49274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103650Z-r1cf579d778pftsbhC1EWRa0gn00000002k0000000004k76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:50 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:50 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:50 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 94f5badb-301e-0000-7603-48eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103650Z-r1cf579d778qlpkrhC1EWRpfc800000008rg000000004ghq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:50 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:51 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:51 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 2d97fd60-e01e-000c-7b06-488e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103651Z-r1cf579d778d5zkmhC1EWRk6h800000008eg000000006224 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:51 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:51 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:51 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5f90aa43-701e-0097-6403-48b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103651Z-r1cf579d778d5zkmhC1EWRk6h800000008fg0000000051ar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:51 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:51 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:51 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: a762f06e-601e-0084-7004-486b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103651Z-r1cf579d7786c2tshC1EWRr1gc00000007pg000000004ce6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:51 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:52 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:53 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 91802af7-d01e-0017-0578-49b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103652Z-r1cf579d7789jf56hC1EWRu5880000000370000000002y9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:52 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:53 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9d874cb7-b01e-0021-2326-49cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103652Z-r1cf579d7789jf56hC1EWRu58800000003bg0000000005ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:53 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:54 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:54 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 62be0662-301e-0020-193f-496299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103654Z-r1cf579d7782v2q5hC1EWRt9bw00000002x0000000001gzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:54 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:53 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:54 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:54 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: a681d1f9-301e-0020-1b07-486299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103654Z-r1cf579d778w59f9hC1EWRze6w00000008b0000000003573 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:54 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:53 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:54 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:54 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: f947939c-401e-0029-4a4e-499b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103654Z-r1cf579d778xr2r4hC1EWRqvfs00000008400000000036yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:54 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:55 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 7b8d486f-101e-0017-1506-4847c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103655Z-r1cf579d778w59f9hC1EWRze6w0000000890000000005xgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:55 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: e1587d4e-001e-0046-7554-49da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103655Z-r1cf579d778qlpkrhC1EWRpfc800000008q0000000005by5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:56 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:56 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 061d09a2-c01e-00a1-3006-487e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103656Z-r1cf579d778d5zkmhC1EWRk6h800000008gg0000000043bf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:56 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:56 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:56 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 562ac663-901e-0029-652e-49274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103656Z-r1cf579d7788c742hC1EWRr97n000000027g000000003yyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:56 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:56 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:56 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 4471680c-501e-0047-7105-48ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103656Z-r1cf579d778d5zkmhC1EWRk6h800000008p0000000000s83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:57 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:57 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:58 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:57 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 67adf02b-201e-0085-1211-4834e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103657Z-r1cf579d778x776bhC1EWRdk80000000082g000000003fw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:58 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:57 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:58 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:58 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: bcc962fc-e01e-0052-630d-49d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103658Z-r1cf579d7789jf56hC1EWRu588000000035g000000004eky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:58 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:58 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:59 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: be723ded-701e-0021-0f06-483d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103659Z-r1cf579d778x776bhC1EWRdk8000000008600000000012u7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:59 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:58 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:59 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 1e99177e-901e-0029-5406-48274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103659Z-r1cf579d7786c2tshC1EWRr1gc00000007v0000000000hn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:59 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:58 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:36:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:36:59 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 317f678a-201e-0071-531d-49ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103659Z-r1cf579d7782v2q5hC1EWRt9bw00000002w00000000022cv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:36:59 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:36:59 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:00 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 426d65b4-001e-0046-3537-49da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103700Z-r1cf579d7789jf56hC1EWRu588000000034g000000004cqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:00 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:00 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:00 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: f1085035-901e-007b-3808-48ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103700Z-r1cf579d7786c2tshC1EWRr1gc00000007v0000000000hp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:00 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:01 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:01 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 447ddde3-501e-0047-290a-48ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103701Z-r1cf579d778d5zkmhC1EWRk6h800000008q00000000002pr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:01 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:01 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:01 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: a36eb884-e01e-0051-4c04-4884b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103701Z-r1cf579d778t76vqhC1EWRdx4w000000026g000000000c4g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:01 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:01 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:01 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 848b85bb-b01e-0053-2106-48cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103701Z-r1cf579d778w59f9hC1EWRze6w00000008bg000000002z22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:02 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:02 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:02 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: fbe39eaf-b01e-0098-4f18-4acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103702Z-r1cf579d778469knhC1EWR2gqc00000000sg000000004uus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:03 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:02 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:03 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 5fa529d3-701e-0097-6308-48b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103703Z-r1cf579d778x776bhC1EWRdk80000000085g000000001rr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:03 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:04 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:04 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 217a7818-401e-00ac-3104-480a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103704Z-r1cf579d778z4wflhC1EWRa3h0000000088g000000000e62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:04 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:04 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:04 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 0c26b312-d01e-0049-6f07-48e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103704Z-r1cf579d7786c2tshC1EWRr1gc00000007qg000000003uka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:04 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:04 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:04 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: b8fa7c57-101e-008e-1803-48cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103704Z-r1cf579d778d5zkmhC1EWRk6h800000008eg0000000062dk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:05 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:05 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:05 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 4ada8ea2-401e-0064-580d-4954af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103705Z-r1cf579d778t76vqhC1EWRdx4w00000002200000000037u0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:05 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:05 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:05 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: e9c8fd08-f01e-003f-7806-48d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103705Z-r1cf579d778z4wflhC1EWRa3h000000008300000000041d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:05 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:37:06 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:37:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:37:06 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 6b09162b-701e-0053-64a5-493a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T103706Z-r1cf579d778l2x6lhC1EWRsptc000000014000000000118f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:37:06 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	05:35:39
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:35:41
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1940,i,14329063300565001641,10079965374436085301,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:35:47
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.cvmaker.com/assets/images/email/logo_@2x.png"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 88.221.168.226
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.cvmaker.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.cvmaker.com/assets/images/email/logo_@2x.png

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6076, Parent PID: 5472

General

Chronological Activities

Analysis Process: chrome.exePID: 6336, Parent PID: 6076

General

Chronological Activities

Windows Analysis Report
https://www.cvmaker.com/assets/images/email/logo_@2x.png