Edit tour

Windows Analysis Report
https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP

Overview

General Information

Sample URL:	https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP
Analysis ID:	1540233
Infos:

Errors URL not reachable

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 968 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2552,i,7309589739671507647,5326656548030758723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:53667 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:53703 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.7:53660 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: hnamedmr.ukremediatlon.co.uk
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53686
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53685
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53687
Source: unknown	Network traffic detected: HTTP traffic on port 53684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53690
Source: unknown	Network traffic detected: HTTP traffic on port 53678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53699
Source: unknown	Network traffic detected: HTTP traffic on port 53717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 53673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 53730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53667 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 53672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 53695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 53736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53669
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53664
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53663
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53668
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53667
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53665
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53671
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53670
Source: unknown	Network traffic detected: HTTP traffic on port 53714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53674
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53679
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53678
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53677
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53676
Source: unknown	Network traffic detected: HTTP traffic on port 53682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53681
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53680
Source: unknown	Network traffic detected: HTTP traffic on port 53671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53725
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53724
Source: unknown	Network traffic detected: HTTP traffic on port 53703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53728
Source: unknown	Network traffic detected: HTTP traffic on port 53732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53723
Source: unknown	Network traffic detected: HTTP traffic on port 53669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53721
Source: unknown	Network traffic detected: HTTP traffic on port 53681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53720
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53735
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53730
Source: unknown	Network traffic detected: HTTP traffic on port 53737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53733
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53731
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53740
Source: unknown	Network traffic detected: HTTP traffic on port 53738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53709
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53708
Source: unknown	Network traffic detected: HTTP traffic on port 53728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53706
Source: unknown	Network traffic detected: HTTP traffic on port 53663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53700
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53717
Source: unknown	Network traffic detected: HTTP traffic on port 53700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53712
Source: unknown	Network traffic detected: HTTP traffic on port 53668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53711
Source: unknown	Network traffic detected: HTTP traffic on port 53685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53711 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:53667 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:53703 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@25/0@23/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2552,i,7309589739671507647,5326656548030758723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2552,i,7309589739671507647,5326656548030758723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
google.com	216.58.206.78	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
hnamedmr.ukremediatlon.co.uk	unknown	unknown	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
172.217.18.4	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540233
Start date and time:	2024-10-23 15:32:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@25/0@23/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	URL browsing timeout or error

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.186.174, 142.251.168.84, 34.104.35.123, 52.149.20.212, 199.232.210.172, 13.85.23.206
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, time.windows.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 15:33:05.416273117 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 23, 2024 15:33:07.906470060 CEST	443	49700	104.98.116.138	192.168.2.7
Oct 23, 2024 15:33:07.906569004 CEST	49700	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:33:08.587980032 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:33:08.588171005 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:33:08.744225025 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:33:10.044434071 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:33:10.228610992 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 23, 2024 15:33:10.416117907 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:33:11.166111946 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:33:12.744242907 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:33:13.957412004 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:13.957484007 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:13.957568884 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:13.957890987 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:13.957922935 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:14.745237112 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:14.745331049 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:14.753334045 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:14.753380060 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:14.753729105 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:14.765671968 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:14.807374954 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.014266014 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.014293909 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.014314890 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.014384031 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.014420033 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.014440060 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.014468908 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.129237890 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.129271984 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.129352093 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.129425049 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.129462957 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.129487038 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.246861935 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.246897936 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.246958017 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.247015953 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.247080088 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.247080088 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.364195108 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.364219904 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.364295959 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.364371061 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.364414930 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.364438057 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.710983992 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.710995913 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.711018085 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.711078882 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.711153984 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.711191893 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.711215973 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.713912010 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.713962078 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.714001894 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.714025974 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.714034081 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.714072943 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.735737085 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.735758066 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.735805035 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.735811949 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.735842943 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.735857964 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.800636053 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.800663948 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.800729036 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.800781965 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.800815105 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.800838947 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.840277910 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:33:15.854943991 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.854973078 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.855053902 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.855114937 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.855151892 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.855175972 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.971859932 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.971884966 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.971967936 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.972040892 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:15.972081900 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:15.972106934 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.089420080 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.089447975 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.089502096 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.089529991 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.089562893 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.089585066 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.154146910 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.154170036 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.154234886 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.154277086 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.154310942 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.154330015 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.208467007 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.208489895 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.208631039 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.208631039 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.208664894 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.208719015 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.253667116 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.253776073 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.253814936 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.253839016 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.253899097 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.256258011 CEST	49704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.256292105 CEST	443	49704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.314728975 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.314780951 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.314889908 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.315922022 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.315969944 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.316028118 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.316109896 CEST	49710	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.316119909 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.316169977 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.316201925 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.316214085 CEST	49710	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.316790104 CEST	49711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.316801071 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.316883087 CEST	49711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.316967010 CEST	49711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.316986084 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.317123890 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.317157984 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.317223072 CEST	49710	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.317234039 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.317250967 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.317271948 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.317287922 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:16.317327023 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:16.317338943 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.048038960 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.048527002 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.048579931 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.049135923 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.049144030 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.049166918 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.049467087 CEST	49710	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.049494028 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.049916029 CEST	49710	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.049921989 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.057785034 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.058121920 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.058144093 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.058507919 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.058512926 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.060378075 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.060710907 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.060728073 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.061091900 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.061098099 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.067374945 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.067735910 CEST	49711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.067766905 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.068141937 CEST	49711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.068147898 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.177467108 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.178435087 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.178489923 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.178559065 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.178572893 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.178581953 CEST	49709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.178587914 CEST	443	49709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.181313038 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.181348085 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.181404114 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.181548119 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.181561947 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.187890053 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.187907934 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.187973022 CEST	49710	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.188003063 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.188127041 CEST	49710	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.188141108 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.188160896 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.188189030 CEST	49710	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.188231945 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.188265085 CEST	49710	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.188265085 CEST	49710	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.188286066 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.188306093 CEST	443	49710	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.189503908 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.189651966 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.189713955 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.189810991 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.189824104 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.189837933 CEST	49712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.189842939 CEST	443	49712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.191116095 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.191188097 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.191272974 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.191416025 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.191447020 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.191731930 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.191754103 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.191812038 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.191929102 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.191940069 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.201921940 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.201951027 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.202003956 CEST	49711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.202013016 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.202025890 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.202076912 CEST	49711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.202214956 CEST	49711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.202222109 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.202229977 CEST	49711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.202234030 CEST	443	49711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.203126907 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.203176022 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.203238010 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.203259945 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.203345060 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.203448057 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.203449011 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.203469992 CEST	49708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.203470945 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.203588963 CEST	443	49708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.204514027 CEST	49717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.204554081 CEST	443	49717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.204648972 CEST	49717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.204790115 CEST	49717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.204806089 CEST	443	49717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.205142021 CEST	49718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.205151081 CEST	443	49718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.205224991 CEST	49718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.205348969 CEST	49718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.205360889 CEST	443	49718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.915864944 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.916392088 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.916426897 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.916929960 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.916943073 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.932920933 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.933336020 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.933372974 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.933801889 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.933809042 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.944250107 CEST	443	49718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.944597006 CEST	49718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.944618940 CEST	443	49718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.945075989 CEST	49718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.945082903 CEST	443	49718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.950397968 CEST	443	49717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.950751066 CEST	49717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.950778961 CEST	443	49717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:17.951133966 CEST	49717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:17.951147079 CEST	443	49717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.046304941 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.046952963 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.047030926 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.047228098 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.047261953 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.047276974 CEST	49714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.047286987 CEST	443	49714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.049951077 CEST	49719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.050004005 CEST	443	49719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.050144911 CEST	49719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.050323963 CEST	49719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.050349951 CEST	443	49719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.064310074 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.064533949 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.064670086 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.064735889 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.064737082 CEST	49716	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.064764977 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.064779043 CEST	443	49716	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.067006111 CEST	49720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.067074060 CEST	443	49720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.067159891 CEST	49720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.067342043 CEST	49720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.067368031 CEST	443	49720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.075026989 CEST	443	49718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.075345039 CEST	443	49718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.075404882 CEST	49718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.075433969 CEST	49718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.075433969 CEST	49718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.075443029 CEST	443	49718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.075452089 CEST	443	49718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.077517033 CEST	49721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.077555895 CEST	443	49721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.077668905 CEST	49721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.077824116 CEST	49721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.077837944 CEST	443	49721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.082139969 CEST	443	49717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.082288027 CEST	443	49717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.082354069 CEST	49717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.082396984 CEST	49717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.082396984 CEST	49717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.082423925 CEST	443	49717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.082452059 CEST	443	49717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.084395885 CEST	49722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.084441900 CEST	443	49722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.084531069 CEST	49722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.084742069 CEST	49722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.084758043 CEST	443	49722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.097444057 CEST	49723	443	192.168.2.7	172.217.18.4
Oct 23, 2024 15:33:18.097484112 CEST	443	49723	172.217.18.4	192.168.2.7
Oct 23, 2024 15:33:18.097668886 CEST	49723	443	192.168.2.7	172.217.18.4
Oct 23, 2024 15:33:18.097867966 CEST	49723	443	192.168.2.7	172.217.18.4
Oct 23, 2024 15:33:18.097888947 CEST	443	49723	172.217.18.4	192.168.2.7
Oct 23, 2024 15:33:18.197168112 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:33:18.197184086 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:33:18.353430986 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 23, 2024 15:33:18.478132010 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.479372025 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.479453087 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.479806900 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.479826927 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.616561890 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.616739988 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.616813898 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.616875887 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.616875887 CEST	49715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.616908073 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.616931915 CEST	443	49715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.620400906 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.620435953 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.620508909 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.620640039 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.620656013 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.780951977 CEST	443	49719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.781656981 CEST	49719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.781682014 CEST	443	49719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.782121897 CEST	49719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.782150030 CEST	443	49719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.821985006 CEST	443	49720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.823064089 CEST	49720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.823076963 CEST	443	49720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.823560953 CEST	49720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.823568106 CEST	443	49720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.867885113 CEST	443	49721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.868279934 CEST	49721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.868294954 CEST	443	49721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.869584084 CEST	49721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.869589090 CEST	443	49721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.873791933 CEST	443	49722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.874212980 CEST	49722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.874236107 CEST	443	49722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.874600887 CEST	49722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.874607086 CEST	443	49722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.913609982 CEST	443	49719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.913762093 CEST	443	49719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.913816929 CEST	49719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.914046049 CEST	49719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.914074898 CEST	443	49719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.917910099 CEST	49725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.917943001 CEST	443	49725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.918003082 CEST	49725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.919253111 CEST	49725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.919269085 CEST	443	49725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.955054998 CEST	443	49720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.955600977 CEST	443	49720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.955836058 CEST	443	49723	172.217.18.4	192.168.2.7
Oct 23, 2024 15:33:18.955874920 CEST	49720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.956291914 CEST	49720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.956307888 CEST	443	49720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.956319094 CEST	49720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.956322908 CEST	443	49720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.957762003 CEST	49723	443	192.168.2.7	172.217.18.4
Oct 23, 2024 15:33:18.957777023 CEST	443	49723	172.217.18.4	192.168.2.7
Oct 23, 2024 15:33:18.959223986 CEST	443	49723	172.217.18.4	192.168.2.7
Oct 23, 2024 15:33:18.959290028 CEST	49723	443	192.168.2.7	172.217.18.4
Oct 23, 2024 15:33:18.960043907 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.960078001 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.960190058 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.961524963 CEST	49723	443	192.168.2.7	172.217.18.4
Oct 23, 2024 15:33:18.961668015 CEST	443	49723	172.217.18.4	192.168.2.7
Oct 23, 2024 15:33:18.961988926 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.962007046 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.997915983 CEST	443	49721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.998111010 CEST	443	49721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.998173952 CEST	49721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.999494076 CEST	49721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.999506950 CEST	443	49721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:18.999525070 CEST	49721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:18.999530077 CEST	443	49721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.008059978 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.008094072 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.008167028 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.008311033 CEST	443	49722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.008466959 CEST	443	49722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.008533001 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.008543015 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.008552074 CEST	49722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.011588097 CEST	49722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.011605978 CEST	443	49722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.011616945 CEST	49722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.011621952 CEST	443	49722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.014645100 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.014655113 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.014812946 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.015002966 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.015016079 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.015850067 CEST	49723	443	192.168.2.7	172.217.18.4
Oct 23, 2024 15:33:19.015860081 CEST	443	49723	172.217.18.4	192.168.2.7
Oct 23, 2024 15:33:19.059742928 CEST	49723	443	192.168.2.7	172.217.18.4
Oct 23, 2024 15:33:19.092808962 CEST	49729	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:19.092839956 CEST	443	49729	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:19.092907906 CEST	49729	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:19.100869894 CEST	49729	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:19.100887060 CEST	443	49729	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:19.316643953 CEST	53660	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:19.322542906 CEST	53	53660	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:19.322655916 CEST	53660	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:19.322655916 CEST	53660	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:19.328310013 CEST	53	53660	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:19.355041027 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.355977058 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.355995893 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.356611967 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.356617928 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.489108086 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.489278078 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.489351034 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.489459991 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.489487886 CEST	49724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.489492893 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.489500046 CEST	443	49724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.492343903 CEST	53661	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.492392063 CEST	443	53661	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.492620945 CEST	53661	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.492711067 CEST	53661	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.492719889 CEST	443	53661	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.672501087 CEST	443	49725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.673089027 CEST	49725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.673105955 CEST	443	49725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.673737049 CEST	49725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.673753977 CEST	443	49725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.733222961 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.742799044 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.742820024 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.743380070 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.743386984 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.752898932 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.753408909 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.753431082 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.753751040 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.753757954 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.756150961 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.756623030 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.756647110 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.757101059 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.757107019 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.808829069 CEST	443	49725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.808943987 CEST	443	49725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.809067011 CEST	49725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.809107065 CEST	49725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.809107065 CEST	49725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.809129953 CEST	443	49725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.809142113 CEST	443	49725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.811350107 CEST	53662	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.811387062 CEST	443	53662	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.811455965 CEST	53662	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.811614990 CEST	53662	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.811630964 CEST	443	53662	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.838325977 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 23, 2024 15:33:19.872415066 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.872653961 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.872720957 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.872772932 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.872791052 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.872805119 CEST	49726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.872812986 CEST	443	49726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.874917984 CEST	53663	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.874948978 CEST	443	53663	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.875142097 CEST	53663	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.875339985 CEST	53663	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.875350952 CEST	443	53663	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.891176939 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.891242981 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.891367912 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.891407967 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.891416073 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.891432047 CEST	49727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.891438007 CEST	443	49727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.891947031 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.892010927 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.892126083 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.892271996 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.892271996 CEST	49728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.892290115 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.892298937 CEST	443	49728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.893944979 CEST	53664	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.893990040 CEST	443	53664	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.894113064 CEST	53664	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.894407988 CEST	53664	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.894448042 CEST	53665	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.894454002 CEST	443	53664	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.894495964 CEST	443	53665	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.894568920 CEST	53665	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.894738913 CEST	53665	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:19.894766092 CEST	443	53665	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:19.918487072 CEST	53	53660	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:19.919338942 CEST	53660	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:19.925090075 CEST	53	53660	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:19.925231934 CEST	53660	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:19.941288948 CEST	443	49729	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:19.941371918 CEST	49729	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:19.943732977 CEST	49729	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:19.943742990 CEST	443	49729	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:19.944134951 CEST	443	49729	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:19.978388071 CEST	49729	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:20.019340038 CEST	443	49729	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:20.219809055 CEST	443	49729	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:20.219950914 CEST	443	49729	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:20.220005989 CEST	49729	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:20.220165968 CEST	49729	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:20.220185041 CEST	443	49729	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:20.220196009 CEST	49729	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:20.220201969 CEST	443	49729	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:20.229566097 CEST	443	53661	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.231334925 CEST	53661	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.231352091 CEST	443	53661	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.231959105 CEST	53661	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.231965065 CEST	443	53661	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.264775038 CEST	53667	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:20.264872074 CEST	443	53667	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:20.265058994 CEST	53667	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:20.265312910 CEST	53667	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:20.265346050 CEST	443	53667	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:20.358386993 CEST	443	53661	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.358566046 CEST	443	53661	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.358633995 CEST	53661	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.358773947 CEST	53661	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.358773947 CEST	53661	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.358788967 CEST	443	53661	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.358797073 CEST	443	53661	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.361217022 CEST	53668	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.361247063 CEST	443	53668	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.361306906 CEST	53668	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.361454010 CEST	53668	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.361464977 CEST	443	53668	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.548439980 CEST	443	53662	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.548877001 CEST	53662	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.548894882 CEST	443	53662	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.549294949 CEST	53662	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.549300909 CEST	443	53662	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.626606941 CEST	443	53664	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.626955032 CEST	53664	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.626982927 CEST	443	53664	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.627348900 CEST	53664	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.627357006 CEST	443	53664	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.627846956 CEST	443	53663	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.628232956 CEST	53663	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.628246069 CEST	443	53663	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.628551960 CEST	53663	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.628556013 CEST	443	53663	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.631542921 CEST	443	53665	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.631839991 CEST	53665	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.631921053 CEST	443	53665	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.632186890 CEST	53665	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.632200956 CEST	443	53665	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.680102110 CEST	443	53662	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.680315018 CEST	443	53662	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.680522919 CEST	53662	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.680522919 CEST	53662	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.680573940 CEST	53662	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.680583954 CEST	443	53662	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.682838917 CEST	53669	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.682872057 CEST	443	53669	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.682935953 CEST	53669	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.683038950 CEST	53669	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.683048010 CEST	443	53669	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.755717039 CEST	443	53664	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.755917072 CEST	443	53664	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.755985022 CEST	53664	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.756032944 CEST	53664	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.756032944 CEST	53664	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.756056070 CEST	443	53664	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.756071091 CEST	443	53664	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.758436918 CEST	443	53663	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.758514881 CEST	443	53663	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.758644104 CEST	53663	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.758809090 CEST	53663	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.758809090 CEST	53663	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.758826971 CEST	443	53663	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.758832932 CEST	53670	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.758836031 CEST	443	53663	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.758863926 CEST	443	53670	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.758997917 CEST	53670	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.759226084 CEST	53670	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.759241104 CEST	443	53670	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.760507107 CEST	443	53665	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.760648966 CEST	443	53665	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.760696888 CEST	53665	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.760968924 CEST	53665	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.761001110 CEST	443	53665	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.761029959 CEST	53665	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.761044979 CEST	443	53665	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.762438059 CEST	53671	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.762474060 CEST	443	53671	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.762543917 CEST	53671	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.762669086 CEST	53671	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.762685061 CEST	443	53671	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.762747049 CEST	53672	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.762773991 CEST	443	53672	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:20.762880087 CEST	53672	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.762967110 CEST	53672	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:20.762980938 CEST	443	53672	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.107434034 CEST	443	53667	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:21.107517004 CEST	53667	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:21.108750105 CEST	53667	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:21.108763933 CEST	443	53667	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:21.109177113 CEST	443	53667	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:21.110065937 CEST	53667	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:21.151351929 CEST	443	53667	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:21.252136946 CEST	443	53668	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.252504110 CEST	53668	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.252530098 CEST	443	53668	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.252885103 CEST	53668	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.252891064 CEST	443	53668	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.357517958 CEST	443	53667	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:21.357587099 CEST	443	53667	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:21.357654095 CEST	53667	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:21.358310938 CEST	53667	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:21.358325958 CEST	443	53667	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:21.358357906 CEST	53667	443	192.168.2.7	184.28.90.27
Oct 23, 2024 15:33:21.358364105 CEST	443	53667	184.28.90.27	192.168.2.7
Oct 23, 2024 15:33:21.398452997 CEST	443	53668	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.398956060 CEST	443	53668	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.399025917 CEST	53668	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.399051905 CEST	53668	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.399060011 CEST	443	53668	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.399076939 CEST	53668	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.399080992 CEST	443	53668	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.401956081 CEST	53673	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.401988983 CEST	443	53673	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.402190924 CEST	53673	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.402302027 CEST	53673	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.402314901 CEST	443	53673	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.418119907 CEST	443	53669	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.418632984 CEST	53669	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.418653011 CEST	443	53669	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.419131994 CEST	53669	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.419136047 CEST	443	53669	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.492063999 CEST	443	53670	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.492491007 CEST	53670	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.492523909 CEST	443	53670	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.492924929 CEST	53670	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.492930889 CEST	443	53670	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.506413937 CEST	443	53672	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.506956100 CEST	53672	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.506968975 CEST	443	53672	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.507124901 CEST	53672	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.507129908 CEST	443	53672	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.527232885 CEST	443	53671	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.527750969 CEST	53671	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.527785063 CEST	443	53671	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.527919054 CEST	53671	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.527925968 CEST	443	53671	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.547436953 CEST	443	53669	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.547662973 CEST	443	53669	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.547722101 CEST	53669	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.547897100 CEST	53669	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.547897100 CEST	53669	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.547910929 CEST	443	53669	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.547919035 CEST	443	53669	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.550188065 CEST	53674	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.550205946 CEST	443	53674	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.550277948 CEST	53674	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.550452948 CEST	53674	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.550466061 CEST	443	53674	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.624603033 CEST	443	53670	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.625127077 CEST	443	53670	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.625200987 CEST	53670	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.625235081 CEST	53670	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.625235081 CEST	53670	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.625250101 CEST	443	53670	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.625262976 CEST	443	53670	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.627381086 CEST	53675	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.627414942 CEST	443	53675	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.627561092 CEST	53675	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.627588034 CEST	53675	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.627593994 CEST	443	53675	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.657663107 CEST	443	53671	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.657834053 CEST	443	53671	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.657929897 CEST	53671	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.657929897 CEST	53671	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.657929897 CEST	53671	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.659835100 CEST	53676	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.659866095 CEST	443	53676	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.659928083 CEST	53676	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.660048008 CEST	53676	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.660059929 CEST	443	53676	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.681097984 CEST	443	53672	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.681206942 CEST	443	53672	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.681315899 CEST	53672	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.681334019 CEST	53672	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.681344986 CEST	443	53672	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.681497097 CEST	53672	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.681512117 CEST	443	53672	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.683202982 CEST	53677	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.683232069 CEST	443	53677	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.683346033 CEST	53677	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.683388948 CEST	53677	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.683394909 CEST	443	53677	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:21.806278944 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 23, 2024 15:33:21.962599039 CEST	53671	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:21.962630987 CEST	443	53671	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.340981960 CEST	443	53673	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.342458010 CEST	53673	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.342482090 CEST	443	53673	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.347129107 CEST	53673	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.347137928 CEST	443	53673	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.464612961 CEST	443	53676	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.470392942 CEST	443	53674	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.470752954 CEST	443	53677	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.473407030 CEST	443	53673	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.473638058 CEST	443	53673	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.473737955 CEST	53673	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.491939068 CEST	53676	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.491945982 CEST	443	53676	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.492508888 CEST	53676	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.492526054 CEST	443	53676	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.492880106 CEST	53674	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.492902040 CEST	443	53674	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.494267941 CEST	53674	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.494275093 CEST	443	53674	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.494860888 CEST	53677	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.494873047 CEST	443	53677	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.496078014 CEST	53677	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.496083975 CEST	443	53677	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.496098995 CEST	443	53675	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.496717930 CEST	53675	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.496732950 CEST	443	53675	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.497778893 CEST	53675	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.497783899 CEST	443	53675	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.498207092 CEST	53673	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.498219967 CEST	443	53673	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.579600096 CEST	53678	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.579639912 CEST	443	53678	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.579749107 CEST	53678	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.581016064 CEST	53678	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.581032991 CEST	443	53678	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.620091915 CEST	443	53676	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.620161057 CEST	443	53676	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.620251894 CEST	53676	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.621989012 CEST	443	53674	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.622046947 CEST	443	53674	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.622128963 CEST	53674	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.628139019 CEST	443	53675	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.628516912 CEST	443	53675	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.628557920 CEST	53676	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.628566027 CEST	443	53676	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.628588915 CEST	53675	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.629820108 CEST	53674	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.629820108 CEST	53674	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.629831076 CEST	443	53674	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.629839897 CEST	443	53674	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.630713940 CEST	443	53677	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.630773067 CEST	443	53677	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.630842924 CEST	53677	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.648756981 CEST	53675	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.648766041 CEST	443	53675	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.648802042 CEST	53675	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.648808002 CEST	443	53675	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.650002956 CEST	53677	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.650021076 CEST	443	53677	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.650039911 CEST	53677	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.650046110 CEST	443	53677	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.665827036 CEST	53679	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.665843964 CEST	443	53679	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.665911913 CEST	53679	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.667414904 CEST	53680	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.667429924 CEST	443	53680	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.667495012 CEST	53680	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.668550014 CEST	53681	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.668597937 CEST	443	53681	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.668670893 CEST	53681	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.669079065 CEST	53679	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.669097900 CEST	443	53679	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.669226885 CEST	53680	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.669239044 CEST	443	53680	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.669370890 CEST	53681	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.669394970 CEST	443	53681	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.670166016 CEST	53682	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.670176983 CEST	443	53682	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:22.670238018 CEST	53682	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.670409918 CEST	53682	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:22.670420885 CEST	443	53682	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.357578993 CEST	443	53678	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.361195087 CEST	53678	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.361208916 CEST	443	53678	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.362353086 CEST	53678	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.362360001 CEST	443	53678	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.414540052 CEST	443	53682	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.415074110 CEST	53682	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.415096998 CEST	443	53682	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.415715933 CEST	53682	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.415723085 CEST	443	53682	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.416137934 CEST	443	53679	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.416524887 CEST	53679	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.416544914 CEST	443	53679	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.417068005 CEST	53679	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.417074919 CEST	443	53679	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.426650047 CEST	443	53681	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.427038908 CEST	53681	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.427048922 CEST	443	53681	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.427593946 CEST	53681	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.427601099 CEST	443	53681	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.489644051 CEST	443	53680	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.490061998 CEST	53680	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.490082979 CEST	443	53680	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.490669012 CEST	53680	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.490674019 CEST	443	53680	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.529108047 CEST	443	53678	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.529301882 CEST	443	53678	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.529361963 CEST	53678	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.529480934 CEST	53678	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.529480934 CEST	53678	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.529500008 CEST	443	53678	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.529508114 CEST	443	53678	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.533329010 CEST	53683	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.533350945 CEST	443	53683	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.533423901 CEST	53683	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.533651114 CEST	53683	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.533664942 CEST	443	53683	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.547643900 CEST	443	53679	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.547724962 CEST	443	53679	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.547765970 CEST	53679	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.547871113 CEST	53679	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.547882080 CEST	53679	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.547880888 CEST	443	53679	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.547888041 CEST	443	53679	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.550523996 CEST	53684	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.550534010 CEST	443	53684	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.550595999 CEST	53684	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.550717115 CEST	53684	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.550728083 CEST	443	53684	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.560235977 CEST	443	53681	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.560313940 CEST	443	53681	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.560370922 CEST	53681	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.560487032 CEST	53681	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.560487032 CEST	53681	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.560497999 CEST	443	53681	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.560506105 CEST	443	53681	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.562968969 CEST	53685	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.562992096 CEST	443	53685	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.563046932 CEST	53685	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.563196898 CEST	53685	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.563210011 CEST	443	53685	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.579782963 CEST	443	53682	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.579930067 CEST	443	53682	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.579988956 CEST	53682	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.580054998 CEST	53682	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.580064058 CEST	443	53682	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.580077887 CEST	53682	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.580084085 CEST	443	53682	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.582398891 CEST	53686	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.582411051 CEST	443	53686	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.582490921 CEST	53686	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.582633018 CEST	53686	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.582643032 CEST	443	53686	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.624665022 CEST	443	53680	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.624918938 CEST	443	53680	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.624970913 CEST	53680	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.625009060 CEST	53680	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.625019073 CEST	443	53680	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.625030041 CEST	53680	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.625035048 CEST	443	53680	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.627181053 CEST	53687	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.627203941 CEST	443	53687	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:23.627268076 CEST	53687	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.627422094 CEST	53687	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:23.627435923 CEST	443	53687	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.291233063 CEST	443	53684	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.304912090 CEST	443	53685	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.339342117 CEST	53684	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.340066910 CEST	443	53686	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.353688002 CEST	53685	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.364902973 CEST	443	53687	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.377270937 CEST	443	53683	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.384939909 CEST	53686	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.416202068 CEST	53687	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.432226896 CEST	53683	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.520298958 CEST	53683	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.520298958 CEST	53683	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.520308971 CEST	443	53683	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.520323038 CEST	443	53683	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.520761967 CEST	53684	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.520797968 CEST	443	53684	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.521760941 CEST	53684	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.521778107 CEST	443	53684	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.522208929 CEST	53685	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.522224903 CEST	443	53685	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.522789001 CEST	53685	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.522794008 CEST	443	53685	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.625622988 CEST	53686	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.625658989 CEST	443	53686	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.631264925 CEST	53686	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.631272078 CEST	443	53686	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.634248972 CEST	53687	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.634267092 CEST	443	53687	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.637267113 CEST	53687	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.637271881 CEST	443	53687	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.648660898 CEST	443	53684	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.648763895 CEST	443	53684	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.649432898 CEST	443	53685	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.649488926 CEST	53684	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.649599075 CEST	443	53685	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.650710106 CEST	443	53683	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.650754929 CEST	53685	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.651030064 CEST	53684	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.651030064 CEST	53684	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.651047945 CEST	443	53684	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.651057005 CEST	443	53684	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.651107073 CEST	53685	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.651107073 CEST	53685	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.651120901 CEST	443	53685	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.651128054 CEST	443	53685	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.651705027 CEST	443	53683	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.654067039 CEST	53683	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.654067039 CEST	53683	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.655241966 CEST	53683	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.655251980 CEST	443	53683	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.723571062 CEST	53689	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.723577976 CEST	53688	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.723609924 CEST	443	53689	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.723628998 CEST	443	53688	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.723706961 CEST	53689	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.723714113 CEST	53688	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.724734068 CEST	53690	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.724755049 CEST	443	53690	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.725044012 CEST	53690	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.725191116 CEST	53689	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.725208044 CEST	443	53689	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.725402117 CEST	53688	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.725421906 CEST	443	53688	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.725842953 CEST	53690	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.725871086 CEST	443	53690	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.757327080 CEST	443	53686	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.757486105 CEST	443	53686	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.757678986 CEST	53686	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.757678986 CEST	53686	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.757908106 CEST	53686	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.757921934 CEST	443	53686	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.762264013 CEST	53691	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.762280941 CEST	443	53691	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.762367964 CEST	53691	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.762564898 CEST	53691	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.762577057 CEST	443	53691	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.787985086 CEST	443	53687	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.788069010 CEST	443	53687	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.788405895 CEST	53687	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.788511038 CEST	53687	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.788511038 CEST	53687	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.788525105 CEST	443	53687	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.788535118 CEST	443	53687	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.791585922 CEST	53692	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.791673899 CEST	443	53692	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:24.791990995 CEST	53692	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.792397976 CEST	53692	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:24.792433023 CEST	443	53692	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.496213913 CEST	443	53689	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.496377945 CEST	443	53690	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.496674061 CEST	53689	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.496686935 CEST	443	53689	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.496872902 CEST	53690	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.496934891 CEST	443	53690	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.497140884 CEST	53689	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.497147083 CEST	443	53689	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.497262001 CEST	53690	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.497278929 CEST	443	53690	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.515860081 CEST	443	53688	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.516195059 CEST	53688	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.516226053 CEST	443	53688	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.516571045 CEST	53688	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.516583920 CEST	443	53688	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.545785904 CEST	443	53691	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.586329937 CEST	53691	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.631248951 CEST	443	53690	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.631397009 CEST	443	53690	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.631460905 CEST	53690	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.632467031 CEST	443	53692	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.633944988 CEST	443	53689	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.634094000 CEST	443	53689	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.634139061 CEST	53689	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.646770000 CEST	443	53688	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.647010088 CEST	443	53688	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.647073030 CEST	53688	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.670205116 CEST	53691	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.670214891 CEST	443	53691	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.670878887 CEST	53691	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.670883894 CEST	443	53691	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.671112061 CEST	53688	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.671113014 CEST	53688	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.671149015 CEST	443	53688	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.671175003 CEST	443	53688	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.674196959 CEST	53690	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.674211025 CEST	443	53690	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.675275087 CEST	53692	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.675311089 CEST	443	53692	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.675985098 CEST	53692	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.675996065 CEST	443	53692	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.676151991 CEST	53689	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.676166058 CEST	443	53689	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.676181078 CEST	53689	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.676187992 CEST	443	53689	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.760554075 CEST	53693	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.760601044 CEST	443	53693	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.760658979 CEST	53693	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.768285990 CEST	53693	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.768307924 CEST	443	53693	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.798077106 CEST	443	53691	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.798233032 CEST	443	53691	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.798289061 CEST	53691	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.803388119 CEST	443	53692	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.803533077 CEST	443	53692	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.803611994 CEST	53692	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.805686951 CEST	53694	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.805720091 CEST	443	53694	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.805794001 CEST	53694	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.806509018 CEST	53691	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.806524038 CEST	443	53691	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.810957909 CEST	53695	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.810998917 CEST	443	53695	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.811052084 CEST	53695	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.829689980 CEST	53692	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.829705954 CEST	443	53692	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.831872940 CEST	53694	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.831898928 CEST	443	53694	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:25.832417965 CEST	53695	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:25.832453966 CEST	443	53695	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.046304941 CEST	53696	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.046345949 CEST	443	53696	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.046408892 CEST	53696	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.048574924 CEST	53696	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.048589945 CEST	443	53696	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.050642014 CEST	53697	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.050715923 CEST	443	53697	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.050791025 CEST	53697	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.051024914 CEST	53697	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.051057100 CEST	443	53697	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.524585962 CEST	443	53693	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.572999954 CEST	53693	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.574790955 CEST	443	53695	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.579161882 CEST	443	53694	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.601686954 CEST	53693	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.601708889 CEST	443	53693	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.602189064 CEST	53693	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.602195024 CEST	443	53693	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.603193998 CEST	53695	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.603213072 CEST	443	53695	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.603864908 CEST	53695	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.603869915 CEST	443	53695	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.603977919 CEST	53694	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.604036093 CEST	443	53694	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.604471922 CEST	53694	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.604482889 CEST	443	53694	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.731628895 CEST	443	53693	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.731810093 CEST	443	53693	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.731925011 CEST	53693	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.732156992 CEST	53693	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.732172012 CEST	443	53693	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.732182026 CEST	53693	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.732187986 CEST	443	53693	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.733911037 CEST	443	53695	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.734312057 CEST	443	53695	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.734385967 CEST	53695	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.735527992 CEST	53699	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.735567093 CEST	53695	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.735573053 CEST	443	53695	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.735579014 CEST	443	53699	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.735582113 CEST	53695	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.735584974 CEST	443	53695	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.735635996 CEST	53699	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.736650944 CEST	53699	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.736679077 CEST	443	53699	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.738641024 CEST	53700	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.738663912 CEST	443	53700	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.738717079 CEST	53700	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.738854885 CEST	53700	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.738866091 CEST	443	53700	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.759872913 CEST	443	53694	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.760009050 CEST	443	53694	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.760066986 CEST	53694	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.760348082 CEST	53694	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.760348082 CEST	53694	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.760377884 CEST	443	53694	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.760401011 CEST	443	53694	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.763024092 CEST	53701	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.763084888 CEST	443	53701	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.763174057 CEST	53701	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.763349056 CEST	53701	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.763380051 CEST	443	53701	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.784775019 CEST	443	53696	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.785515070 CEST	53696	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.785523891 CEST	443	53696	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.786053896 CEST	53696	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.786058903 CEST	443	53696	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.807478905 CEST	443	53697	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.807899952 CEST	53697	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.807919979 CEST	443	53697	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.808340073 CEST	53697	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.808351040 CEST	443	53697	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.915678024 CEST	443	53696	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.915817022 CEST	443	53696	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.915884972 CEST	53696	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.916017056 CEST	53696	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.916034937 CEST	443	53696	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.916044950 CEST	53696	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.916049957 CEST	443	53696	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.918709993 CEST	53702	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.918752909 CEST	443	53702	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.918833971 CEST	53702	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.918976068 CEST	53702	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.918991089 CEST	443	53702	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.940577984 CEST	443	53697	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.940743923 CEST	443	53697	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.940818071 CEST	53697	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.940941095 CEST	53697	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.940941095 CEST	53697	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.940968990 CEST	443	53697	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.940995932 CEST	443	53697	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.943881035 CEST	53703	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.943978071 CEST	443	53703	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:26.944052935 CEST	53703	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.944248915 CEST	53703	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:26.944283962 CEST	443	53703	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.468791962 CEST	443	53700	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.469356060 CEST	53700	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.469371080 CEST	443	53700	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.469814062 CEST	53700	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.469818115 CEST	443	53700	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.472573042 CEST	443	53699	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.472951889 CEST	53699	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.473001957 CEST	443	53699	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.473373890 CEST	53699	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.473387003 CEST	443	53699	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.502660036 CEST	443	53701	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.503097057 CEST	53701	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.503181934 CEST	443	53701	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.503380060 CEST	53701	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.503396988 CEST	443	53701	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.603028059 CEST	443	53699	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.603121996 CEST	443	53699	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.603264093 CEST	53699	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.603339911 CEST	53699	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.603339911 CEST	53699	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.603368998 CEST	443	53699	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.603393078 CEST	443	53699	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.606257915 CEST	53704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.606312990 CEST	443	53704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.607233047 CEST	53704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.607234001 CEST	53704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.607276917 CEST	443	53704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.609219074 CEST	443	53700	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.609411955 CEST	443	53700	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.609468937 CEST	53700	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.609489918 CEST	53700	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.609497070 CEST	443	53700	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.609505892 CEST	53700	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.609509945 CEST	443	53700	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.611521959 CEST	53705	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.611548901 CEST	443	53705	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.611748934 CEST	53705	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.611748934 CEST	53705	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.611783981 CEST	443	53705	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.634133101 CEST	443	53701	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.634607077 CEST	443	53701	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.634809971 CEST	53701	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.634809971 CEST	53701	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.634809971 CEST	53701	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.638516903 CEST	53706	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.638540983 CEST	443	53706	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.638629913 CEST	53706	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.642275095 CEST	53706	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.642293930 CEST	443	53706	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.661416054 CEST	443	53702	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.661787987 CEST	53702	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.661798000 CEST	443	53702	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.662278891 CEST	53702	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.662283897 CEST	443	53702	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.682008028 CEST	443	53703	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.682524920 CEST	53703	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.682544947 CEST	443	53703	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.683007002 CEST	53703	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.683021069 CEST	443	53703	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.791558027 CEST	443	53702	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.792301893 CEST	443	53702	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.792357922 CEST	53702	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.792434931 CEST	53702	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.792434931 CEST	53702	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.792443991 CEST	443	53702	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.792450905 CEST	443	53702	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.794395924 CEST	53708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.794429064 CEST	443	53708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.794482946 CEST	53708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.794753075 CEST	53708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.794769049 CEST	443	53708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.815134048 CEST	443	53703	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.815287113 CEST	443	53703	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.815428019 CEST	53703	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.815643072 CEST	53703	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.815643072 CEST	53703	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.815677881 CEST	443	53703	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.815697908 CEST	443	53703	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.817209005 CEST	53709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.817240953 CEST	443	53709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.817364931 CEST	53709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.817486048 CEST	53709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.817497015 CEST	443	53709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:27.932502985 CEST	53701	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:27.932568073 CEST	443	53701	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.344775915 CEST	443	53704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.345359087 CEST	53704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.345376015 CEST	443	53704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.345757008 CEST	53704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.345761061 CEST	443	53704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.354825974 CEST	443	53705	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.355165005 CEST	53705	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.355173111 CEST	443	53705	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.355568886 CEST	53705	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.355572939 CEST	443	53705	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.377567053 CEST	443	53706	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.377928972 CEST	53706	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.377943039 CEST	443	53706	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.378492117 CEST	53706	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.378498077 CEST	443	53706	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.474260092 CEST	443	53704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.474420071 CEST	443	53704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.474482059 CEST	53704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.474524975 CEST	53704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.474524975 CEST	53704	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.474544048 CEST	443	53704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.474554062 CEST	443	53704	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.476872921 CEST	53711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.476885080 CEST	443	53711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.476944923 CEST	53711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.477051973 CEST	53711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.477065086 CEST	443	53711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.489516973 CEST	443	53705	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.489583015 CEST	443	53705	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.489649057 CEST	53705	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.489700079 CEST	53705	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.489706039 CEST	443	53705	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.489737988 CEST	53705	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.489742994 CEST	443	53705	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.491821051 CEST	53712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.491831064 CEST	443	53712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.491959095 CEST	53712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.492088079 CEST	53712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.492098093 CEST	443	53712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.508275986 CEST	443	53706	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.508358955 CEST	443	53706	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.508440018 CEST	53706	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.508536100 CEST	53706	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.508536100 CEST	53706	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.508543015 CEST	443	53706	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.508548975 CEST	443	53706	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.510350943 CEST	53713	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.510365963 CEST	443	53713	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.510592937 CEST	53713	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.510626078 CEST	53713	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.510629892 CEST	443	53713	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.544811964 CEST	443	53708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.545115948 CEST	53708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.545125008 CEST	443	53708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.545449972 CEST	53708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.545454979 CEST	443	53708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.563426971 CEST	443	53709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.563734055 CEST	53709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.563741922 CEST	443	53709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.564060926 CEST	53709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.564064980 CEST	443	53709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.676779032 CEST	443	53708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.676947117 CEST	443	53708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.677069902 CEST	53708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.677197933 CEST	53708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.677213907 CEST	443	53708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.677222967 CEST	53708	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.677227974 CEST	443	53708	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.679522038 CEST	53714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.679560900 CEST	443	53714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.679651022 CEST	53714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.679846048 CEST	53714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.679867029 CEST	443	53714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.695475101 CEST	443	53709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.696037054 CEST	443	53709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.696216106 CEST	53709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.696257114 CEST	53709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.696271896 CEST	443	53709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.696281910 CEST	53709	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.696288109 CEST	443	53709	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.698550940 CEST	53715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.698576927 CEST	443	53715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.698807955 CEST	53715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.699234962 CEST	53715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:28.699250937 CEST	443	53715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:28.961497068 CEST	443	49723	172.217.18.4	192.168.2.7
Oct 23, 2024 15:33:28.961565018 CEST	443	49723	172.217.18.4	192.168.2.7
Oct 23, 2024 15:33:28.961668015 CEST	49723	443	192.168.2.7	172.217.18.4
Oct 23, 2024 15:33:29.222815037 CEST	443	53712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.223347902 CEST	53712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.223355055 CEST	443	53712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.225240946 CEST	53712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.225245953 CEST	443	53712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.229142904 CEST	443	53711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.229480028 CEST	53711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.229511023 CEST	443	53711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.229890108 CEST	53711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.229896069 CEST	443	53711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.257308006 CEST	443	53713	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.257658958 CEST	53713	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.257672071 CEST	443	53713	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.258044004 CEST	53713	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.258049011 CEST	443	53713	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.351943016 CEST	443	53712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.352013111 CEST	443	53712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.352168083 CEST	53712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.352250099 CEST	53712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.352250099 CEST	53712	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.352257967 CEST	443	53712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.352266073 CEST	443	53712	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.356970072 CEST	53717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.356995106 CEST	443	53717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.357053041 CEST	53717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.357955933 CEST	53717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.357970953 CEST	443	53717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.364492893 CEST	443	53711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.364659071 CEST	443	53711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.364759922 CEST	53711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.364759922 CEST	53711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.364882946 CEST	53711	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.364895105 CEST	443	53711	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.366820097 CEST	53718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.366839886 CEST	443	53718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.366893053 CEST	53718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.367032051 CEST	53718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.367043972 CEST	443	53718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.389394999 CEST	443	53713	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.389544964 CEST	443	53713	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.389621019 CEST	53713	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.389836073 CEST	53713	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.389836073 CEST	53713	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.389848948 CEST	443	53713	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.389858007 CEST	443	53713	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.392911911 CEST	53719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.392927885 CEST	443	53719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.392988920 CEST	53719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.393148899 CEST	53719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.393160105 CEST	443	53719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.415656090 CEST	443	53714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.416362047 CEST	53714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.416369915 CEST	443	53714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.417887926 CEST	53714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.417892933 CEST	443	53714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.454437971 CEST	443	53715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.455046892 CEST	53715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.455069065 CEST	443	53715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.455837011 CEST	53715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.455851078 CEST	443	53715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.546195030 CEST	443	53714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.546403885 CEST	443	53714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.546582937 CEST	53714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.546582937 CEST	53714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.546659946 CEST	53714	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.546669960 CEST	443	53714	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.549741983 CEST	53720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.549838066 CEST	443	53720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.550017118 CEST	53720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.550271988 CEST	53720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.550311089 CEST	443	53720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.591056108 CEST	443	53715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.591129065 CEST	443	53715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.591285944 CEST	53715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.591285944 CEST	53715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.591319084 CEST	53715	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.591331005 CEST	443	53715	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.593887091 CEST	53721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.593924046 CEST	443	53721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:29.594024897 CEST	53721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.594363928 CEST	53721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:29.594377995 CEST	443	53721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.099453926 CEST	443	53718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.100038052 CEST	53718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.100056887 CEST	443	53718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.100497961 CEST	53718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.100503922 CEST	443	53718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.106204033 CEST	49723	443	192.168.2.7	172.217.18.4
Oct 23, 2024 15:33:30.106226921 CEST	443	49723	172.217.18.4	192.168.2.7
Oct 23, 2024 15:33:30.115350962 CEST	443	53717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.115700006 CEST	53717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.115734100 CEST	443	53717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.116055965 CEST	53717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.116096020 CEST	443	53717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.231792927 CEST	443	53718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.232086897 CEST	443	53718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.232139111 CEST	53718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.235253096 CEST	53718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.235268116 CEST	443	53718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.235279083 CEST	53718	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.235285044 CEST	443	53718	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.238809109 CEST	53722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.238898993 CEST	443	53722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.238992929 CEST	53722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.239147902 CEST	53722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.239187002 CEST	443	53722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.248651981 CEST	443	53717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.248805046 CEST	443	53717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.248950958 CEST	53717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.248980999 CEST	53717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.249000072 CEST	443	53717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.249012947 CEST	53717	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.249022007 CEST	443	53717	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.250953913 CEST	53723	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.250987053 CEST	443	53723	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.251049995 CEST	53723	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.251187086 CEST	53723	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.251202106 CEST	443	53723	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.300558090 CEST	443	53720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.300961971 CEST	53720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.301027060 CEST	443	53720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.301389933 CEST	53720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.301403046 CEST	443	53720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.342080116 CEST	443	53721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.342592955 CEST	53721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.342611074 CEST	443	53721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.343112946 CEST	53721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.343118906 CEST	443	53721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.435508966 CEST	443	53720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.435601950 CEST	443	53720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.435684919 CEST	53720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.435769081 CEST	53720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.435806990 CEST	443	53720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.435841084 CEST	53720	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.435857058 CEST	443	53720	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.438287973 CEST	53724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.438358068 CEST	443	53724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.438442945 CEST	53724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.438580990 CEST	53724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.438602924 CEST	443	53724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.479696035 CEST	443	53721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.480273008 CEST	443	53721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.480343103 CEST	53721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.480371952 CEST	53721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.480386972 CEST	443	53721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.480397940 CEST	53721	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.480403900 CEST	443	53721	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.482487917 CEST	53725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.482511997 CEST	443	53725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.482566118 CEST	53725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.482680082 CEST	53725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.482691050 CEST	443	53725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.992893934 CEST	443	53722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.993521929 CEST	53722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.993587017 CEST	443	53722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.993942022 CEST	53722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.993958950 CEST	443	53722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.997252941 CEST	443	53723	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.997601986 CEST	53723	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.997625113 CEST	443	53723	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:30.997944117 CEST	53723	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:30.997948885 CEST	443	53723	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.128953934 CEST	443	53722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.129265070 CEST	443	53722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.129384041 CEST	53722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.133234978 CEST	443	53723	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.133295059 CEST	443	53723	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.133419037 CEST	443	53723	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.133699894 CEST	53723	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.134321928 CEST	53722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.134321928 CEST	53722	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.134367943 CEST	443	53722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.134396076 CEST	53723	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.134396076 CEST	53723	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.134397984 CEST	443	53722	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.134412050 CEST	443	53723	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.134423018 CEST	443	53723	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.139259100 CEST	53726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.139344931 CEST	443	53726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.139488935 CEST	53726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.143249035 CEST	53727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.143275976 CEST	443	53727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.147566080 CEST	53727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.150688887 CEST	443	53719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.152688026 CEST	53726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.152725935 CEST	443	53726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.152822971 CEST	53727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.152836084 CEST	443	53727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.153949022 CEST	53719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.153949022 CEST	53719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.153973103 CEST	443	53719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.153983116 CEST	443	53719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.206048965 CEST	443	53724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.210165024 CEST	53724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.210197926 CEST	443	53724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.210692883 CEST	53724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.210707903 CEST	443	53724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.218574047 CEST	443	53725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.219139099 CEST	53725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.219153881 CEST	443	53725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.221271038 CEST	53725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.221276045 CEST	443	53725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.287347078 CEST	443	53719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.287975073 CEST	443	53719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.288230896 CEST	53719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.288286924 CEST	53719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.288286924 CEST	53719	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.288304090 CEST	443	53719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.288316965 CEST	443	53719	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.292133093 CEST	53728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.292157888 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.292270899 CEST	53728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.292455912 CEST	53728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.292467117 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.348773003 CEST	443	53725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.348937035 CEST	443	53725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.349387884 CEST	53725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.349387884 CEST	53725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.349522114 CEST	53725	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.349531889 CEST	443	53725	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.353203058 CEST	53729	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.353235960 CEST	443	53729	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.353319883 CEST	53729	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.353538036 CEST	53729	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.353552103 CEST	443	53729	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.354861021 CEST	443	53724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.355108976 CEST	443	53724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.355192900 CEST	53724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.355473042 CEST	53724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.355503082 CEST	443	53724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.355540991 CEST	53724	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.355556965 CEST	443	53724	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.358253002 CEST	53730	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.358273029 CEST	443	53730	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.358448029 CEST	53730	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.362302065 CEST	53730	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.362318039 CEST	443	53730	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.878823042 CEST	443	53726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.879654884 CEST	53726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.879743099 CEST	443	53726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.880217075 CEST	53726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.880234003 CEST	443	53726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.900728941 CEST	443	53727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.901783943 CEST	53727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.901817083 CEST	443	53727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:31.902292013 CEST	53727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:31.902299881 CEST	443	53727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.010035038 CEST	443	53726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.010085106 CEST	443	53726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.010212898 CEST	443	53726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.010457993 CEST	53726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.010457993 CEST	53726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.010458946 CEST	53726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.014600039 CEST	53731	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.014664888 CEST	443	53731	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.014947891 CEST	53731	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.014947891 CEST	53731	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.014996052 CEST	443	53731	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.028013945 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.029145002 CEST	53728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.029145002 CEST	53728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.029159069 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.029166937 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.035413980 CEST	443	53727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.035466909 CEST	443	53727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.035567045 CEST	53727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.035584927 CEST	443	53727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.035716057 CEST	53727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.035765886 CEST	53727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.035765886 CEST	53727	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.035782099 CEST	443	53727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.035793066 CEST	443	53727	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.038654089 CEST	53732	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.038680077 CEST	443	53732	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.038831949 CEST	53732	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.039098978 CEST	53732	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.039112091 CEST	443	53732	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.099661112 CEST	443	53730	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.100636005 CEST	53730	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.100646019 CEST	443	53730	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.101284981 CEST	53730	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.101299047 CEST	443	53730	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.162794113 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.162822008 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.162978888 CEST	53728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.162986040 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.163110971 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.163249016 CEST	53728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.163336039 CEST	53728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.163336039 CEST	53728	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.163343906 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.163350105 CEST	443	53728	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.165688992 CEST	443	53729	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.166640043 CEST	53729	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.166673899 CEST	443	53729	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.167346001 CEST	53729	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.167363882 CEST	443	53729	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.168265104 CEST	53733	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.168306112 CEST	443	53733	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.168380022 CEST	53733	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.168641090 CEST	53733	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.168658018 CEST	443	53733	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.229480028 CEST	443	53730	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.229540110 CEST	443	53730	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.229690075 CEST	53730	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.230110884 CEST	53730	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.230118990 CEST	443	53730	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.230185986 CEST	53730	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.230191946 CEST	443	53730	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.234522104 CEST	53734	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.234549999 CEST	443	53734	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.234622955 CEST	53734	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.234819889 CEST	53734	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.234837055 CEST	443	53734	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.305627108 CEST	443	53729	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.305793047 CEST	443	53729	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.305888891 CEST	53729	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.306078911 CEST	53729	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.306078911 CEST	53729	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.306099892 CEST	443	53729	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.306113005 CEST	443	53729	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.309539080 CEST	53735	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.309567928 CEST	443	53735	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.309637070 CEST	53735	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.309994936 CEST	53735	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.310025930 CEST	443	53735	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.323092937 CEST	53726	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.323133945 CEST	443	53726	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.766541958 CEST	443	53731	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.767241001 CEST	53731	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.767261982 CEST	443	53731	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.768155098 CEST	53731	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.768179893 CEST	443	53731	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.794569969 CEST	443	53732	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.795434952 CEST	53732	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.795454025 CEST	443	53732	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.796499014 CEST	53732	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.796504021 CEST	443	53732	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.902769089 CEST	443	53731	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.902842999 CEST	443	53731	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.903116941 CEST	53731	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.903196096 CEST	53731	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.903196096 CEST	53731	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.903218031 CEST	443	53731	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.903230906 CEST	443	53731	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.906693935 CEST	53736	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.906785011 CEST	443	53736	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.906879902 CEST	53736	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.907063007 CEST	53736	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.907099962 CEST	443	53736	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.921215057 CEST	443	53733	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.921889067 CEST	53733	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.921914101 CEST	443	53733	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.922514915 CEST	53733	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.922521114 CEST	443	53733	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.928543091 CEST	443	53732	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.928673983 CEST	443	53732	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.928879976 CEST	53732	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.928956032 CEST	53732	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.928966999 CEST	443	53732	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.928992033 CEST	53732	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.928997040 CEST	443	53732	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.932207108 CEST	53737	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.932255030 CEST	443	53737	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:32.932353973 CEST	53737	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.932898998 CEST	53737	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:32.932919025 CEST	443	53737	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.052419901 CEST	443	53733	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.052582026 CEST	443	53733	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.052649021 CEST	53733	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.052882910 CEST	53733	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.052882910 CEST	53733	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.052898884 CEST	443	53733	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.052908897 CEST	443	53733	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.053267956 CEST	443	53735	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.054141045 CEST	53735	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.054157019 CEST	443	53735	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.054768085 CEST	53735	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.054774046 CEST	443	53735	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.057327032 CEST	53738	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.057415009 CEST	443	53738	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.057573080 CEST	53738	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.057715893 CEST	53738	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.057749033 CEST	443	53738	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.072016954 CEST	443	53734	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.072479963 CEST	53734	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.072495937 CEST	443	53734	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.072978020 CEST	53734	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.072985888 CEST	443	53734	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.184287071 CEST	443	53735	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.184576988 CEST	443	53735	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.184768915 CEST	53735	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.184768915 CEST	53735	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.186146021 CEST	53735	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.186186075 CEST	443	53735	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.188222885 CEST	53739	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.188263893 CEST	443	53739	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.188574076 CEST	53739	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.188574076 CEST	53739	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.188608885 CEST	443	53739	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.205499887 CEST	443	53734	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.205678940 CEST	443	53734	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.205888033 CEST	53734	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.205888033 CEST	53734	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.206000090 CEST	53734	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.206013918 CEST	443	53734	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.209183931 CEST	53740	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.209244967 CEST	443	53740	13.107.246.60	192.168.2.7
Oct 23, 2024 15:33:33.209475040 CEST	53740	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.209475040 CEST	53740	443	192.168.2.7	13.107.246.60
Oct 23, 2024 15:33:33.209544897 CEST	443	53740	13.107.246.60	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 15:33:13.890309095 CEST	53	51491	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:13.920731068 CEST	53	58716	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:15.258550882 CEST	53	63282	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:15.716696978 CEST	61728	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:15.716949940 CEST	59645	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:15.731576920 CEST	53	59645	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:15.731941938 CEST	62940	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:15.732402086 CEST	53	61728	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:15.732675076 CEST	64277	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:15.734772921 CEST	123	123	192.168.2.7	20.101.57.9
Oct 23, 2024 15:33:15.742613077 CEST	53	62940	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:15.745798111 CEST	53	64277	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:15.746573925 CEST	54359	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:15.758775949 CEST	53	54359	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:15.868618965 CEST	55398	53	192.168.2.7	8.8.8.8
Oct 23, 2024 15:33:15.868968010 CEST	59699	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:15.876499891 CEST	53	55398	8.8.8.8	192.168.2.7
Oct 23, 2024 15:33:15.876691103 CEST	53	59699	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:16.003989935 CEST	123	123	20.101.57.9	192.168.2.7
Oct 23, 2024 15:33:16.882411003 CEST	60944	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:16.882560968 CEST	56704	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:16.894304037 CEST	53	56704	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:16.894670010 CEST	58311	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:16.896177053 CEST	53	60944	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:16.896477938 CEST	52851	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:16.902926922 CEST	53	58311	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:16.904931068 CEST	53	52851	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:18.088747025 CEST	58307	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:18.088920116 CEST	52509	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:18.096576929 CEST	53	52509	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:18.096673965 CEST	53	58307	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:19.316159964 CEST	53	53222	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:20.145241022 CEST	56813	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:20.146157026 CEST	49241	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:20.156207085 CEST	53	56813	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:20.156281948 CEST	53	49241	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:20.157793045 CEST	49173	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:20.157958984 CEST	60150	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:20.176937103 CEST	53	49173	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:20.180299044 CEST	53	60150	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:20.180807114 CEST	51503	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:20.191966057 CEST	53	51503	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:25.549726963 CEST	63008	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:25.549989939 CEST	55850	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:25.559357882 CEST	53	63008	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:25.560470104 CEST	53	55850	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:25.668528080 CEST	52115	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:25.668904066 CEST	54784	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:25.680634022 CEST	53	54784	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:25.681098938 CEST	53	52115	1.1.1.1	192.168.2.7
Oct 23, 2024 15:33:25.715832949 CEST	50821	53	192.168.2.7	1.1.1.1
Oct 23, 2024 15:33:25.728308916 CEST	53	50821	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 15:33:15.716696978 CEST	192.168.2.7	1.1.1.1	0x8233	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:15.716949940 CEST	192.168.2.7	1.1.1.1	0x4a97	Standard query (0)	hnamedmr.ukremediatlon.co.uk	65	IN (0x0001)	false
Oct 23, 2024 15:33:15.731941938 CEST	192.168.2.7	1.1.1.1	0xa6b4	Standard query (0)	hnamedmr.ukremediatlon.co.uk	65	IN (0x0001)	false
Oct 23, 2024 15:33:15.732675076 CEST	192.168.2.7	1.1.1.1	0xeba4	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:15.746573925 CEST	192.168.2.7	1.1.1.1	0xa8db	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:15.868618965 CEST	192.168.2.7	8.8.8.8	0x6e4b	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:15.868968010 CEST	192.168.2.7	1.1.1.1	0xe63a	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:16.882411003 CEST	192.168.2.7	1.1.1.1	0x79d	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:16.882560968 CEST	192.168.2.7	1.1.1.1	0xc81f	Standard query (0)	hnamedmr.ukremediatlon.co.uk	65	IN (0x0001)	false
Oct 23, 2024 15:33:16.894670010 CEST	192.168.2.7	1.1.1.1	0x99fc	Standard query (0)	hnamedmr.ukremediatlon.co.uk	65	IN (0x0001)	false
Oct 23, 2024 15:33:16.896477938 CEST	192.168.2.7	1.1.1.1	0x2a6a	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:18.088747025 CEST	192.168.2.7	1.1.1.1	0x3e75	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:18.088920116 CEST	192.168.2.7	1.1.1.1	0x69de	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 23, 2024 15:33:20.145241022 CEST	192.168.2.7	1.1.1.1	0x3f10	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:20.146157026 CEST	192.168.2.7	1.1.1.1	0x951e	Standard query (0)	hnamedmr.ukremediatlon.co.uk	65	IN (0x0001)	false
Oct 23, 2024 15:33:20.157793045 CEST	192.168.2.7	1.1.1.1	0xb41d	Standard query (0)	hnamedmr.ukremediatlon.co.uk	65	IN (0x0001)	false
Oct 23, 2024 15:33:20.157958984 CEST	192.168.2.7	1.1.1.1	0xa8d3	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:20.180807114 CEST	192.168.2.7	1.1.1.1	0xc3bb	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:25.549726963 CEST	192.168.2.7	1.1.1.1	0x97a	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:25.549989939 CEST	192.168.2.7	1.1.1.1	0x9eca	Standard query (0)	hnamedmr.ukremediatlon.co.uk	65	IN (0x0001)	false
Oct 23, 2024 15:33:25.668528080 CEST	192.168.2.7	1.1.1.1	0x73c3	Standard query (0)	hnamedmr.ukremediatlon.co.uk	65	IN (0x0001)	false
Oct 23, 2024 15:33:25.668904066 CEST	192.168.2.7	1.1.1.1	0xf932	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:25.715832949 CEST	192.168.2.7	1.1.1.1	0x73e4	Standard query (0)	hnamedmr.ukremediatlon.co.uk	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 15:33:15.731576920 CEST	1.1.1.1	192.168.2.7	0x4a97	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	65	IN (0x0001)	false
Oct 23, 2024 15:33:15.732402086 CEST	1.1.1.1	192.168.2.7	0x8233	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:15.742613077 CEST	1.1.1.1	192.168.2.7	0xa6b4	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	65	IN (0x0001)	false
Oct 23, 2024 15:33:15.745798111 CEST	1.1.1.1	192.168.2.7	0xeba4	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:15.758775949 CEST	1.1.1.1	192.168.2.7	0xa8db	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:15.876499891 CEST	8.8.8.8	192.168.2.7	0x6e4b	No error (0)	google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:15.876691103 CEST	1.1.1.1	192.168.2.7	0xe63a	No error (0)	google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:16.894304037 CEST	1.1.1.1	192.168.2.7	0xc81f	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	65	IN (0x0001)	false
Oct 23, 2024 15:33:16.896177053 CEST	1.1.1.1	192.168.2.7	0x79d	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:16.902926922 CEST	1.1.1.1	192.168.2.7	0x99fc	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	65	IN (0x0001)	false
Oct 23, 2024 15:33:16.904931068 CEST	1.1.1.1	192.168.2.7	0x2a6a	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:18.096576929 CEST	1.1.1.1	192.168.2.7	0x69de	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 15:33:18.096673965 CEST	1.1.1.1	192.168.2.7	0x3e75	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:20.156207085 CEST	1.1.1.1	192.168.2.7	0x3f10	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:20.156281948 CEST	1.1.1.1	192.168.2.7	0x951e	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	65	IN (0x0001)	false
Oct 23, 2024 15:33:20.176937103 CEST	1.1.1.1	192.168.2.7	0xb41d	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	65	IN (0x0001)	false
Oct 23, 2024 15:33:20.180299044 CEST	1.1.1.1	192.168.2.7	0xa8d3	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:20.191966057 CEST	1.1.1.1	192.168.2.7	0xc3bb	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:25.559357882 CEST	1.1.1.1	192.168.2.7	0x97a	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:25.560470104 CEST	1.1.1.1	192.168.2.7	0x9eca	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	65	IN (0x0001)	false
Oct 23, 2024 15:33:25.680634022 CEST	1.1.1.1	192.168.2.7	0xf932	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:25.681098938 CEST	1.1.1.1	192.168.2.7	0x73c3	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	65	IN (0x0001)	false
Oct 23, 2024 15:33:25.728308916 CEST	1.1.1.1	192.168.2.7	0x73e4	Server failure (2)	hnamedmr.ukremediatlon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:27.742880106 CEST	1.1.1.1	192.168.2.7	0xecca	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:33:27.742880106 CEST	1.1.1.1	192.168.2.7	0xecca	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.7	49704	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:14 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:15 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:14 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 89fa8e61-601e-0070-0c14-24a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133314Z-r197bdfb6b4kkrkjmxpfy2et100000000msg00000000866z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:15 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 13:33:15 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 13:33:15 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 13:33:15 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 13:33:15 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 13:33:15 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 13:33:15 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 13:33:15 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 13:33:15 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 13:33:15 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49709	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:17 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:17 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133317Z-16849878b78p4hmjy4vha5ddqw000000064g00000000cxyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:17 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.7	49710	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:17 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:17 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:17 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0a857d33-501e-0064-1456-231f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133317Z-r197bdfb6b42sc4ddemybqpm140000000mng000000006ezm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:17 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49712	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:17 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133317Z-16849878b78z5q7jpbgf6e9mcw000000069g00000000ff0h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:17 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49708	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:17 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:17 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133317Z-16849878b78k8q5pxkgux3mbgg000000065000000000f93e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:17 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49711	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:17 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:17 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133317Z-16849878b78k46f8kzwxznephs000000064g00000000c639 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:17 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49714	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:17 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 095283a4-c01e-0066-76f4-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133317Z-r197bdfb6b4qpk6v9629ad4b5s0000000asg00000000g99s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49716	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:17 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133317Z-16849878b78q7vdcwmryzsh7bg00000006cg000000007fpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49718	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:17 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:18 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: f5652952-501e-00a3-1ef2-24c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133318Z-r197bdfb6b4kkm84kpepthehx400000006hg000000000t1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:18 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49717	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:17 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:17 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133317Z-16849878b785jsrm4477mv3ezn000000064g00000000gz6e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:18 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49715	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:18 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 22602994-801e-00a0-73ef-242196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133318Z-15b8d89586fsx9lfqmgrbzpgmg0000000cu000000000bhvm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49719	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:18 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 1ae852e8-d01e-008e-29f5-24387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133318Z-15b8d89586fst84k5f3z220tec0000000crg00000000dxpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49720	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:18 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 53592b39-c01e-0082-1ef3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133318Z-15b8d89586fs9clcebkvq6f0sc0000000csg000000007871 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49721	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:18 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: a11575a1-501e-007b-2115-245ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133318Z-15b8d89586f2hk2885zk3a4enc0000000crg00000000b1x7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49722	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:18 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133318Z-16849878b787sbpl0sv29sm89s00000006eg000000001vu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49724	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:19 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b19fc5e0-d01e-0028-0d15-247896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133319Z-15b8d89586fmhkw4gksnr1w3ds0000000cwg000000003p6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49725	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:19 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 89a40fd7-b01e-00ab-1aad-24dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133319Z-15b8d89586fhl2qtatrz3vfkf000000003ag00000000d2ay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49726	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:19 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133319Z-16849878b78c5zx4gw8tcga1b4000000063000000000e5br x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49728	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:19 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:19 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: fc173041-601e-0097-79ad-24f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133319Z-15b8d89586fxdh48qknu9dqk2g00000001mg0000000053ws x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:19 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49727	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:19 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133319Z-16849878b78q7vdcwmryzsh7bg00000006dg000000005277 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49729	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 13:33:20 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=97972 Date: Wed, 23 Oct 2024 13:33:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	53661	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:20 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:20 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: b478c109-d01e-00ad-3dad-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133320Z-15b8d89586fbt6nf34bm5uw08n00000001h00000000027r2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:20 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	53662	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:20 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 31ca0507-001e-0014-3715-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133320Z-15b8d89586f989rks44whx5v7s0000000cpg000000009kxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	53664	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:20 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fc16bb1d-401e-000a-34f4-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133320Z-15b8d89586fhl2qtatrz3vfkf000000003gg000000000q51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:20 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	53663	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:20 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2ab53e8b-001e-0066-7ef2-24561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133320Z-r197bdfb6b429k2s6br3k49qn4000000039000000000gpzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	53665	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:20 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b38717f8-301e-0020-78f3-246299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133320Z-15b8d89586f4zwgbz365q03b0c0000000cx0000000009ggm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	53667	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:21 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 13:33:21 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=97940 Date: Wed, 23 Oct 2024 13:33:21 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 13:33:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	53668	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:21 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:21 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133321Z-16849878b782h9tt5z2wa5rfxg000000066000000000cv63 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:21 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	53669	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:21 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:21 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 33373380-a01e-003d-4cf5-2498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133321Z-15b8d89586fxdh48qknu9dqk2g00000001h000000000aebk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:21 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	53670	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:21 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ff743265-301e-000c-1ff2-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133321Z-r197bdfb6b4t7wszdvrfk02ah400000007rg00000000dpnt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	53672	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:21 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133321Z-16849878b785f8wh85a0w3ennn000000068g000000007xru x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	53671	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:21 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133321Z-16849878b78gvgmlcfru6nuc54000000064g00000000h4my x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	53673	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:22 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133322Z-16849878b78gvgmlcfru6nuc540000000690000000006d30 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:22 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	53676	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:22 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c90bfe97-101e-008d-42ad-2492e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133322Z-15b8d89586f2hk2885zk3a4enc0000000ctg000000005t6e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	53674	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:22 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:22 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133322Z-16849878b78dkr6tqerbnpg1zc00000006ag000000007kaz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:22 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	53677	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:22 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133322Z-16849878b78jfqwd1dsrhqg3aw00000006eg0000000021az x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	53675	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:22 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d2baa5f3-801e-0078-3ff3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133322Z-r197bdfb6b487xlkrahepdse5000000007ng00000000csgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	53678	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:23 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:23 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133323Z-16849878b782558xg5kpzay6es000000067000000000aqaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:23 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	53682	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:23 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:23 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133323Z-16849878b785jsrm4477mv3ezn000000067000000000bawx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:23 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	53679	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:23 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2d861f62-501e-0064-3bf5-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133323Z-15b8d89586fcvr6p5956n5d0rc000000037000000000g1b2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	53681	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:23 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:23 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133323Z-15b8d89586fzhrwg5nzgg1z6000000000ctg00000000agdr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:23 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	53680	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:23 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 6177d94c-d01e-0028-6bfc-247896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133323Z-r197bdfb6b4lbgfqheuaxfm7xn0000000fpg00000000cqu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	53683	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:24 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 6764be4f-301e-0099-1efc-246683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133324Z-r197bdfb6b4h2vctng0a0nubg8000000099000000000fbqw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	53684	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:24 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:24 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3589f4cc-c01e-0079-731b-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133324Z-15b8d89586flzzks5bs37v2b9000000001tg00000000c2ak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:24 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	53685	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:24 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133324Z-16849878b784cpcc2dr9ch74ng000000069000000000ftxc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	53686	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:24 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:24 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133324Z-16849878b78q7vdcwmryzsh7bg000000068g00000000fb8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:24 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	53687	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:24 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:24 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133324Z-16849878b788tnsxzb2smucwdc00000006ag000000007kfv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:24 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	53689	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:25 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:25 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133325Z-16849878b78hz7zj8u0h2zng1400000006d00000000069d1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:25 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	53690	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:25 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133325Z-16849878b78q7vdcwmryzsh7bg00000006c0000000008kgs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	53688	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:25 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:25 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f2a27b04-801e-0047-6ef4-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133325Z-r197bdfb6b4cz6xrsdncwtgzd40000000mvg000000003931 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	53691	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:25 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 7082da1f-601e-003d-073e-226f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133325Z-16849878b782h9tt5z2wa5rfxg000000064g00000000gyh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	53692	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:25 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133325Z-16849878b78z5q7jpbgf6e9mcw00000006bg00000000agxy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	53693	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:26 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133326Z-16849878b78q4pnrt955f8nkx80000000660000000008h1n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	53695	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:26 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133326Z-16849878b7862vlcc7m66axrs0000000066g00000000gy4c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	53694	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:26 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133326Z-16849878b78z5q7jpbgf6e9mcw000000068g00000000gse5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	53696	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:26 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1d9ab00d-a01e-0002-3af4-245074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133326Z-r197bdfb6b4kq4j5t834fh90qn000000096g00000000c7k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	53697	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:26 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133326Z-16849878b787psctgubawhx7k800000005zg00000000hsuz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	53700	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:27 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:27 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: acb2ef9b-e01e-001f-1f33-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133327Z-16849878b78c2tmb7nhatnd68s00000006ag00000000808x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:27 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	53699	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:27 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 09cb71da-201e-0033-6911-22b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133327Z-16849878b788tnsxzb2smucwdc00000006c00000000030f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	53701	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:27 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:27 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 79657049-a01e-0032-1dac-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133327Z-15b8d89586f6nn8zquf2vw6t5400000003fg0000000041eh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:27 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	53702	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:27 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:27 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 217788b5-401e-0016-11a2-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133327Z-16849878b78q4pnrt955f8nkx8000000063g00000000e88y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:27 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	53703	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:27 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: adc95832-401e-0016-59f5-2453e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133327Z-r197bdfb6b4h2vctng0a0nubg800000009c0000000006s5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	53704	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:28 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:28 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c03d6508-c01e-002b-4650-236e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133328Z-r197bdfb6b4vlqfn9hfre6k1s80000000b1g0000000005wp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:28 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	53705	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:28 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 5eede7fe-b01e-00ab-1a1a-24dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133328Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000an000000000bm0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	53706	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:28 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 25ee231e-901e-0083-60ac-24bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133328Z-15b8d89586fxdh48qknu9dqk2g00000001g000000000dwge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	53708	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:28 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 965686a0-401e-008c-4bf2-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133328Z-15b8d89586f8l5961kfst8fpb000000007tg000000009c41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	53709	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:28 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133328Z-16849878b78q7vdcwmryzsh7bg00000006ag00000000c3u6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	53712	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:29 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 7acd244f-d01e-002b-55f2-2425fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133329Z-r197bdfb6b487xlkrahepdse5000000007mg00000000fk5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	53711	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:29 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:29 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 907020bf-b01e-00ab-33f4-24dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133329Z-15b8d89586fqj7k5uht6e8nnew0000000cbg00000000fpfx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:29 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	53713	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:29 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:29 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133329Z-16849878b784cpcc2dr9ch74ng00000006eg00000000209x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:29 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	53714	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:29 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:29 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133329Z-16849878b78dsttbr1qw36rxs8000000065000000000n2b3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:29 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	53715	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:29 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 043e3b4b-d01e-0049-50ae-24e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133329Z-15b8d89586fsx9lfqmgrbzpgmg0000000ct000000000enhw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	53718	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:30 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c82c03e6-f01e-001f-0cf2-245dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133330Z-15b8d89586ff5l62quxsfe8ugg0000000ceg00000000fa2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	53717	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:30 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: da0abffb-c01e-008d-1f17-242eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133330Z-r197bdfb6b4cz6xrsdncwtgzd40000000mug000000004azy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	53720	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:30 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:30 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133330Z-16849878b78c5zx4gw8tcga1b4000000064000000000dadq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:30 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	53721	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:30 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af82a6d2-001e-00a2-4ff2-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133330Z-15b8d89586fvk4kmwqg9fgbkn800000001r000000000ggqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	53722	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:30 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:31 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 013f0f94-801e-00ac-2ef3-24fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133331Z-15b8d89586f2hk2885zk3a4enc0000000cpg00000000e247 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:31 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	53723	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:30 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:31 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 26247a46-101e-000b-3298-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133331Z-15b8d89586fwzdd8urmg0p1ebs00000007ug000000006suq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:31 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	53719	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:31 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 39b78571-501e-0016-43f4-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133331Z-15b8d89586fqckbz0ssbuzzp1n00000000rg0000000094a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	53724	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:31 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:31 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133331Z-16849878b782558xg5kpzay6es000000069g000000004hw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:31 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	53725	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:31 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:31 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133331Z-16849878b78lhh9t0fb3392enw000000061000000000nsdg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:31 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	53726	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:31 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:31 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133331Z-16849878b78hz7zj8u0h2zng1400000006bg00000000aegr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:32 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	53727	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:31 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:31 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d9905de8-801e-0083-31a7-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133331Z-15b8d89586ff5l62quxsfe8ugg0000000cm00000000042kf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:32 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	53728	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:32 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:32 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 9c2fdade-c01e-002b-16f2-246e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133332Z-15b8d89586f42m673h1quuee4s00000001q0000000006xby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:32 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	53730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:32 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c29108f7-201e-0000-1ff5-24a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133332Z-r197bdfb6b4ld6jca8vdwzkams00000007p0000000002f4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	53729	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:32 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a956e522-e01e-0020-405a-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133332Z-r197bdfb6b4kq4j5t834fh90qn0000000990000000006vae x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	53731	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:32 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ef146494-c01e-00a1-274d-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133332Z-16849878b7842t5ke0k7mzbt3c000000063g00000000anbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:33:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	53732	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:32 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133332Z-16849878b78z5q7jpbgf6e9mcw000000067g00000000m68t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	53733	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:32 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133332Z-16849878b785jsrm4477mv3ezn000000065g00000000fxr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:33 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	53735	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:33 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:33 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 14811fc9-901e-0016-298e-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133333Z-16849878b78hz7zj8u0h2zng14000000069000000000g4zq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:33 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	53734	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:33 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:33 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133333Z-16849878b78q7vdcwmryzsh7bg00000006d0000000006sw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:33 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	53736	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:33 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:33 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 67684ae8-901e-0016-58ee-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133333Z-16849878b78p6ttkmyustyrk8s000000062000000000hpn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:33 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	53737	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:33 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:33 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 8d011c5a-801e-0047-22f7-217265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133333Z-16849878b78lhh9t0fb3392enw000000068g000000000fdk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:33 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	53738	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:33 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:33 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 84d8b792-101e-008e-7ffc-24cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133333Z-15b8d89586f4zwgbz365q03b0c0000000d0g000000003t4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:33 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	53739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:33 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:33 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133333Z-16849878b78c5zx4gw8tcga1b40000000680000000002bex x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:34 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	53740	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:33 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:34 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133334Z-16849878b78k46f8kzwxznephs000000062000000000k08r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:34 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	53741	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:34 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:34 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133334Z-16849878b789m94j7902zfvfr0000000064g00000000d0ne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:34 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	53742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:34 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133334Z-16849878b78lhh9t0fb3392enw0000000670000000005egk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	53743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:34 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:33:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:33:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T133334Z-16849878b78q4pnrt955f8nkx8000000062000000000h38n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:33:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	53744	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:34 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	53745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:33:34 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6904, Parent PID: 1020

General

Target ID:	0
Start time:	09:33:07
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 968, Parent PID: 6904

General

Target ID:	4
Start time:	09:33:11
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2552,i,7309589739671507647,5326656548030758723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 972, Parent PID: 1020

General

Target ID:	11
Start time:	09:33:14
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6904, Parent PID: 1020

General

Chronological Activities

Analysis Process: chrome.exePID: 968, Parent PID: 6904

General

Chronological Activities

Analysis Process: chrome.exePID: 972, Parent PID: 1020

General

Chronological Activities

Disassembly

Windows Analysis Report
https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP