Edit tour

Windows Analysis Report
https://crmri.crm.dynamics.com/api/EmailAnalytics/OpenLink?TrackingId=659cf4f2-4d91-ef11-ac21-000d3a56f3be&ConversationTrackingId=e128c86a-df31-48c7-b419-f5dd100bada6&ClientType=webclient&OrganizationId=aeae68a5-57e4-49ca-a82c-f2df71524041&Salt=30a65c1c-a240-495b-a4c0-d65d7dcbd0bd&RedirectUrl=https%

Overview

General Information

Sample URL:	https://crmri.crm.dynamics.com/api/EmailAnalytics/OpenLink?TrackingId=659cf4f2-4d91-ef11-ac21-000d3a56f3be&ConversationTrackingId=e128c86a-df31-48c7-b419-f5dd100bada6&ClientType=webclient&Organization
Analysis ID:	1540377
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2004,i,13061649624349182603,857125993022094789,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://crmri.crm.dynamics.com/api/EmailAnalytics/OpenLink?TrackingId=659cf4f2-4d91-ef11-ac21-000d3a56f3be&ConversationTrackingId=e128c86a-df31-48c7-b419-f5dd100bada6&ClientType=webclient&OrganizationId=aeae68a5-57e4-49ca-a82c-f2df71524041&Salt=30a65c1c-a240-495b-a4c0-d65d7dcbd0bd&RedirectUrl=https%3a%2f%2foutlook.office365.com%2fowa%2fcalendar%2fJaimeRubiano15minutemeeting%40bookings.microsoft.com%2fbookings%2f&ValidityToken=ekPdlX6P0%2b21E5TNtc5DHCTEQmFIpI2OUrJ55EeRFaQ%3d" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.69.42.241:443 -> 192.168.2.4:53856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:53858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:53859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:53860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:53862 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:49730 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:53855 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 40.69.42.241
Source: unknown	TCP traffic detected without corresponding DNS query: 40.69.42.241
Source: unknown	TCP traffic detected without corresponding DNS query: 40.69.42.241

Source: global traffic	HTTP traffic detected: GET /owa/calendar/JaimeRubiano15minutemeeting@bookings.microsoft.com/bookings/ HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /book/JaimeRubiano15minutemeeting@bookings.microsoft.com/ HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=7F8734ECED854AAFAA2F1D16A4E3DBB6; OIDC=1
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=CGhAe5lbpkLhKT3&MD=u87d4ZzA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /book/JaimeRubiano15minutemeeting@bookings.microsoft.com/ HTTP/1.1Host: outlook.office365.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=7F8734ECED854AAFAA2F1D16A4E3DBB6; OIDC=1
Source: global traffic	HTTP traffic detected: GET /clientwebservice/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: fe3cr.delivery.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sls/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=CGhAe5lbpkLhKT3&MD=u87d4ZzA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=CGhAe5lbpkLhKT3&MD=u87d4ZzA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /book/JaimeRubiano15minutemeeting@bookings.microsoft.com/ HTTP/1.1Host: outlook.office365.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=7F8734ECED854AAFAA2F1D16A4E3DBB6; OIDC=1
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: crmri.crm.dynamics.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: 241.42.69.40.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: 200.163.202.172.in-addr.arpa

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 54070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 54058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53901
Source: unknown	Network traffic detected: HTTP traffic on port 53900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53900
Source: unknown	Network traffic detected: HTTP traffic on port 54024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53905
Source: unknown	Network traffic detected: HTTP traffic on port 53969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53904
Source: unknown	Network traffic detected: HTTP traffic on port 54001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53908
Source: unknown	Network traffic detected: HTTP traffic on port 53913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53913
Source: unknown	Network traffic detected: HTTP traffic on port 54046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53912
Source: unknown	Network traffic detected: HTTP traffic on port 53970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53911
Source: unknown	Network traffic detected: HTTP traffic on port 53947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53916
Source: unknown	Network traffic detected: HTTP traffic on port 53890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53910
Source: unknown	Network traffic detected: HTTP traffic on port 53958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53919
Source: unknown	Network traffic detected: HTTP traffic on port 53992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54059
Source: unknown	Network traffic detected: HTTP traffic on port 53902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54057
Source: unknown	Network traffic detected: HTTP traffic on port 53934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54063
Source: unknown	Network traffic detected: HTTP traffic on port 53911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54062
Source: unknown	Network traffic detected: HTTP traffic on port 53957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54067
Source: unknown	Network traffic detected: HTTP traffic on port 54013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54066
Source: unknown	Network traffic detected: HTTP traffic on port 53880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54064
Source: unknown	Network traffic detected: HTTP traffic on port 54025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54068
Source: unknown	Network traffic detected: HTTP traffic on port 53980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54073
Source: unknown	Network traffic detected: HTTP traffic on port 54060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54070
Source: unknown	Network traffic detected: HTTP traffic on port 53946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 53968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53966
Source: unknown	Network traffic detected: HTTP traffic on port 53967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53960
Source: unknown	Network traffic detected: HTTP traffic on port 53870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53965
Source: unknown	Network traffic detected: HTTP traffic on port 54055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53964
Source: unknown	Network traffic detected: HTTP traffic on port 53944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53963
Source: unknown	Network traffic detected: HTTP traffic on port 53921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53962
Source: unknown	Network traffic detected: HTTP traffic on port 54032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53978
Source: unknown	Network traffic detected: HTTP traffic on port 54044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53973
Source: unknown	Network traffic detected: HTTP traffic on port 53910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53986
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53863
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53990
Source: unknown	Network traffic detected: HTTP traffic on port 53871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53999
Source: unknown	Network traffic detected: HTTP traffic on port 53859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53880
Source: unknown	Network traffic detected: HTTP traffic on port 54010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53924
Source: unknown	Network traffic detected: HTTP traffic on port 54022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53922
Source: unknown	Network traffic detected: HTTP traffic on port 53860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53928
Source: unknown	Network traffic detected: HTTP traffic on port 53883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53920
Source: unknown	Network traffic detected: HTTP traffic on port 53919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53938
Source: unknown	Network traffic detected: HTTP traffic on port 53966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53932
Source: unknown	Network traffic detected: HTTP traffic on port 53920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53930
Source: unknown	Network traffic detected: HTTP traffic on port 54033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53948
Source: unknown	Network traffic detected: HTTP traffic on port 53965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53940
Source: unknown	Network traffic detected: HTTP traffic on port 54034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53955
Source: unknown	Network traffic detected: HTTP traffic on port 53861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53959
Source: unknown	Network traffic detected: HTTP traffic on port 54000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53954
Source: unknown	Network traffic detected: HTTP traffic on port 53943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53952
Source: unknown	Network traffic detected: HTTP traffic on port 54056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53951
Source: unknown	Network traffic detected: HTTP traffic on port 53909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53882
Source: unknown	Network traffic detected: HTTP traffic on port 53963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53885
Source: unknown	Network traffic detected: HTTP traffic on port 53940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53891
Source: unknown	Network traffic detected: HTTP traffic on port 53986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53890
Source: unknown	Network traffic detected: HTTP traffic on port 54042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53894
Source: unknown	Network traffic detected: HTTP traffic on port 53928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53892
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53898
Source: unknown	Network traffic detected: HTTP traffic on port 54054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53896
Source: unknown	Network traffic detected: HTTP traffic on port 53907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54020
Source: unknown	Network traffic detected: HTTP traffic on port 53938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54027
Source: unknown	Network traffic detected: HTTP traffic on port 53903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54024
Source: unknown	Network traffic detected: HTTP traffic on port 54050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54028
Source: unknown	Network traffic detected: HTTP traffic on port 53899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54031
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54038
Source: unknown	Network traffic detected: HTTP traffic on port 53927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54035
Source: unknown	Network traffic detected: HTTP traffic on port 53961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54041
Source: unknown	Network traffic detected: HTTP traffic on port 53984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54040
Source: unknown	Network traffic detected: HTTP traffic on port 53898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54042
Source: unknown	Network traffic detected: HTTP traffic on port 54027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54047
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54046
Source: unknown	Network traffic detected: HTTP traffic on port 54038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54052
Source: unknown	Network traffic detected: HTTP traffic on port 53876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54053
Source: unknown	Network traffic detected: HTTP traffic on port 53950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54000
Source: unknown	Network traffic detected: HTTP traffic on port 54040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54002
Source: unknown	Network traffic detected: HTTP traffic on port 54017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54008
Source: unknown	Network traffic detected: HTTP traffic on port 53926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54006
Source: unknown	Network traffic detected: HTTP traffic on port 54073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54010
Source: unknown	Network traffic detected: HTTP traffic on port 54028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54062 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.69.42.241:443 -> 192.168.2.4:53856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:53858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:53859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:53860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:53862 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@20/0@10/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2004,i,13061649624349182603,857125993022094789,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://crmri.crm.dynamics.com/api/EmailAnalytics/OpenLink?TrackingId=659cf4f2-4d91-ef11-ac21-000d3a56f3be&ConversationTrackingId=e128c86a-df31-48c7-b419-f5dd100bada6&ClientType=webclient&OrganizationId=aeae68a5-57e4-49ca-a82c-f2df71524041&Salt=30a65c1c-a240-495b-a4c0-d65d7dcbd0bd&RedirectUrl=https%3a%2f%2foutlook.office365.com%2fowa%2fcalendar%2fJaimeRubiano15minutemeeting%40bookings.microsoft.com%2fbookings%2f&ValidityToken=ekPdlX6P0%2b21E5TNtc5DHCTEQmFIpI2OUrJ55EeRFaQ%3d"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2004,i,13061649624349182603,857125993022094789,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
www.google.com	216.58.212.132	true	false	unknown
HHN-efz.ms-acdc.office.com	52.98.179.66	true	false	unknown
crmri.crm.dynamics.com	unknown	unknown	false	unknown
241.42.69.40.in-addr.arpa	unknown	unknown	false	unknown
outlook.office365.com	unknown	unknown	false	unknown
200.163.202.172.in-addr.arpa	unknown	unknown	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.132	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
40.99.214.34	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.98.179.66	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.17
192.168.2.18
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540377
Start date and time:	2024-10-23 17:52:19 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://crmri.crm.dynamics.com/api/EmailAnalytics/OpenLink?TrackingId=659cf4f2-4d91-ef11-ac21-000d3a56f3be&ConversationTrackingId=e128c86a-df31-48c7-b419-f5dd100bada6&ClientType=webclient&OrganizationId=aeae68a5-57e4-49ca-a82c-f2df71524041&Salt=30a65c1c-a240-495b-a4c0-d65d7dcbd0bd&RedirectUrl=https%3a%2f%2foutlook.office365.com%2fowa%2fcalendar%2fJaimeRubiano15minutemeeting%40bookings.microsoft.com%2fbookings%2f&ValidityToken=ekPdlX6P0%2b21E5TNtc5DHCTEQmFIpI2OUrJ55EeRFaQ%3d
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@20/0@10/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.251.168.84, 142.250.115.102, 142.250.115.100, 142.250.115.138, 142.250.115.101, 142.250.115.139, 142.250.115.113, 34.104.35.123, 172.168.77.139, 93.184.221.240, 192.229.221.95, 131.107.255.255, 142.250.184.195
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, ritrackingservice3nam.centralus.cloudapp.azure.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://crmri.crm.dynamics.com/api/EmailAnalytics/OpenLink?TrackingId=659cf4f2-4d91-ef11-ac21-000d3a56f3be&ConversationTrackingId=e128c86a-df31-48c7-b419-f5dd100bada6&ClientType=webclient&OrganizationId=aeae68a5-57e4-49ca-a82c-f2df71524041&Salt=30a65c1c-a240-495b-a4c0-d65d7dcbd0bd&RedirectUrl=https%3a%2f%2foutlook.office365.com%2fowa%2fcalendar%2fJaimeRubiano15minutemeeting%40bookings.microsoft.com%2fbookings%2f&ValidityToken=ekPdlX6P0%2b21E5TNtc5DHCTEQmFIpI2OUrJ55EeRFaQ%3d

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 17:53:24.782640934 CEST	49730	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:24.788117886 CEST	53	49730	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:24.788222075 CEST	49730	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:24.788914919 CEST	49730	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:24.788953066 CEST	49730	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:24.794320107 CEST	53	49730	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:24.794368029 CEST	53	49730	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:25.382879019 CEST	53	49730	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:25.389174938 CEST	49730	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:25.395447969 CEST	53	49730	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:25.395522118 CEST	49730	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:28.578506947 CEST	49740	443	192.168.2.4	216.58.212.132
Oct 23, 2024 17:53:28.578552008 CEST	443	49740	216.58.212.132	192.168.2.4
Oct 23, 2024 17:53:28.578612089 CEST	49740	443	192.168.2.4	216.58.212.132
Oct 23, 2024 17:53:28.578975916 CEST	49740	443	192.168.2.4	216.58.212.132
Oct 23, 2024 17:53:28.578991890 CEST	443	49740	216.58.212.132	192.168.2.4
Oct 23, 2024 17:53:29.761707067 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:29.761744976 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:29.761841059 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:29.761878967 CEST	443	49740	216.58.212.132	192.168.2.4
Oct 23, 2024 17:53:29.762113094 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:29.762124062 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:29.763732910 CEST	49740	443	192.168.2.4	216.58.212.132
Oct 23, 2024 17:53:29.763753891 CEST	443	49740	216.58.212.132	192.168.2.4
Oct 23, 2024 17:53:29.764825106 CEST	443	49740	216.58.212.132	192.168.2.4
Oct 23, 2024 17:53:29.764919043 CEST	49740	443	192.168.2.4	216.58.212.132
Oct 23, 2024 17:53:29.769007921 CEST	49740	443	192.168.2.4	216.58.212.132
Oct 23, 2024 17:53:29.769083977 CEST	443	49740	216.58.212.132	192.168.2.4
Oct 23, 2024 17:53:29.825004101 CEST	49740	443	192.168.2.4	216.58.212.132
Oct 23, 2024 17:53:29.825031042 CEST	443	49740	216.58.212.132	192.168.2.4
Oct 23, 2024 17:53:29.867862940 CEST	49740	443	192.168.2.4	216.58.212.132
Oct 23, 2024 17:53:30.883244991 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:30.895358086 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:30.895405054 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:30.896711111 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:30.896783113 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:30.896794081 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:30.896842957 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:30.903245926 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:30.903404951 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:30.903517962 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:30.903527975 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:30.944612980 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:31.022438049 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 23, 2024 17:53:31.022500038 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 23, 2024 17:53:31.022571087 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 23, 2024 17:53:31.037319899 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 23, 2024 17:53:31.037364960 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 23, 2024 17:53:31.615765095 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:31.655121088 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:31.655155897 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:31.662615061 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:31.662741899 CEST	443	49741	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:31.662889004 CEST	49741	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:31.668364048 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:31.668401003 CEST	443	49743	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:31.668462038 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:31.668689966 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:31.668701887 CEST	443	49743	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:31.780848026 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:31.780903101 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:31.780985117 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:31.783274889 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:31.783288002 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:31.886075020 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 23, 2024 17:53:31.886204958 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 23, 2024 17:53:31.893220901 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 23, 2024 17:53:31.893250942 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 23, 2024 17:53:31.893594027 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 23, 2024 17:53:31.943551064 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 23, 2024 17:53:31.954406023 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 23, 2024 17:53:31.999334097 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 23, 2024 17:53:32.196724892 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 23, 2024 17:53:32.196827888 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 23, 2024 17:53:32.197067976 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 23, 2024 17:53:32.197504044 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 23, 2024 17:53:32.197534084 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 23, 2024 17:53:32.197546005 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 23, 2024 17:53:32.197551966 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 23, 2024 17:53:32.243077040 CEST	49745	443	192.168.2.4	2.19.244.127
Oct 23, 2024 17:53:32.243117094 CEST	443	49745	2.19.244.127	192.168.2.4
Oct 23, 2024 17:53:32.243303061 CEST	49745	443	192.168.2.4	2.19.244.127
Oct 23, 2024 17:53:32.243674040 CEST	49745	443	192.168.2.4	2.19.244.127
Oct 23, 2024 17:53:32.243690968 CEST	443	49745	2.19.244.127	192.168.2.4
Oct 23, 2024 17:53:32.789779902 CEST	443	49743	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:32.790082932 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:32.790127993 CEST	443	49743	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:32.793682098 CEST	443	49743	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:32.793755054 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:32.793770075 CEST	443	49743	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:32.793812990 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:32.794223070 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:32.794282913 CEST	443	49743	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:32.794483900 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:32.834547997 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:32.834574938 CEST	443	49743	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:32.881676912 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:32.908638954 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:32.908745050 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:32.929749012 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:32.929797888 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:32.930749893 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:32.979494095 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:33.112960100 CEST	443	49745	2.19.244.127	192.168.2.4
Oct 23, 2024 17:53:33.113079071 CEST	49745	443	192.168.2.4	2.19.244.127
Oct 23, 2024 17:53:33.115498066 CEST	49745	443	192.168.2.4	2.19.244.127
Oct 23, 2024 17:53:33.115505934 CEST	443	49745	2.19.244.127	192.168.2.4
Oct 23, 2024 17:53:33.115921974 CEST	443	49745	2.19.244.127	192.168.2.4
Oct 23, 2024 17:53:33.118422985 CEST	49745	443	192.168.2.4	2.19.244.127
Oct 23, 2024 17:53:33.159343004 CEST	443	49745	2.19.244.127	192.168.2.4
Oct 23, 2024 17:53:33.172477007 CEST	443	49743	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:33.173088074 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:33.173151016 CEST	443	49743	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:33.173274994 CEST	49743	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:33.374245882 CEST	443	49745	2.19.244.127	192.168.2.4
Oct 23, 2024 17:53:33.374412060 CEST	443	49745	2.19.244.127	192.168.2.4
Oct 23, 2024 17:53:33.374675035 CEST	49745	443	192.168.2.4	2.19.244.127
Oct 23, 2024 17:53:33.375197887 CEST	49745	443	192.168.2.4	2.19.244.127
Oct 23, 2024 17:53:33.375219107 CEST	443	49745	2.19.244.127	192.168.2.4
Oct 23, 2024 17:53:33.375232935 CEST	49745	443	192.168.2.4	2.19.244.127
Oct 23, 2024 17:53:33.375238895 CEST	443	49745	2.19.244.127	192.168.2.4
Oct 23, 2024 17:53:33.886214972 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:33.898108006 CEST	49723	80	192.168.2.4	2.16.100.168
Oct 23, 2024 17:53:33.903975964 CEST	80	49723	2.16.100.168	192.168.2.4
Oct 23, 2024 17:53:33.904035091 CEST	49723	80	192.168.2.4	2.16.100.168
Oct 23, 2024 17:53:33.927356958 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.264929056 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.264964104 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.264975071 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.265011072 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.265058994 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:34.265093088 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.265113115 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:34.265120029 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.265152931 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:34.265175104 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:34.265187025 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.265248060 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:34.265258074 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.317620039 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:34.388207912 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.388355017 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:34.388413906 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:35.582369089 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:35.582408905 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:35.582423925 CEST	49744	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:35.582432032 CEST	443	49744	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:39.434992075 CEST	443	49740	216.58.212.132	192.168.2.4
Oct 23, 2024 17:53:39.435067892 CEST	443	49740	216.58.212.132	192.168.2.4
Oct 23, 2024 17:53:39.437813997 CEST	49740	443	192.168.2.4	216.58.212.132
Oct 23, 2024 17:53:41.009648085 CEST	49740	443	192.168.2.4	216.58.212.132
Oct 23, 2024 17:53:41.009671926 CEST	443	49740	216.58.212.132	192.168.2.4
Oct 23, 2024 17:53:44.978563070 CEST	49751	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:44.978612900 CEST	443	49751	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:44.978693008 CEST	49751	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:44.979074955 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:44.979178905 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:44.979254007 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:44.979933023 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:44.979969025 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:44.980205059 CEST	49751	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:44.980221033 CEST	443	49751	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.097862005 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.099612951 CEST	443	49751	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.110270977 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:46.110301018 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.110409021 CEST	49751	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:46.110435963 CEST	443	49751	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.111676931 CEST	443	49751	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.111856937 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.111948967 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:46.111958027 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.114283085 CEST	49751	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:46.114326000 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:46.114465952 CEST	443	49751	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.123672009 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:46.123770952 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.123991013 CEST	49751	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:46.171335936 CEST	443	49751	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.172903061 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:46.172934055 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.218918085 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:46.494782925 CEST	443	49751	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.495572090 CEST	49751	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:46.495663881 CEST	443	49751	52.98.179.66	192.168.2.4
Oct 23, 2024 17:53:46.495732069 CEST	49751	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:53:49.635021925 CEST	53855	53	192.168.2.4	162.159.36.2
Oct 23, 2024 17:53:49.640357018 CEST	53	53855	162.159.36.2	192.168.2.4
Oct 23, 2024 17:53:49.640417099 CEST	53855	53	192.168.2.4	162.159.36.2
Oct 23, 2024 17:53:49.645910978 CEST	53	53855	162.159.36.2	192.168.2.4
Oct 23, 2024 17:53:50.245098114 CEST	53855	53	192.168.2.4	162.159.36.2
Oct 23, 2024 17:53:50.251033068 CEST	53	53855	162.159.36.2	192.168.2.4
Oct 23, 2024 17:53:50.251094103 CEST	53855	53	192.168.2.4	162.159.36.2
Oct 23, 2024 17:53:50.276583910 CEST	53856	443	192.168.2.4	40.69.42.241
Oct 23, 2024 17:53:50.276612997 CEST	443	53856	40.69.42.241	192.168.2.4
Oct 23, 2024 17:53:50.276683092 CEST	53856	443	192.168.2.4	40.69.42.241
Oct 23, 2024 17:53:50.278007984 CEST	53856	443	192.168.2.4	40.69.42.241
Oct 23, 2024 17:53:50.278021097 CEST	443	53856	40.69.42.241	192.168.2.4
Oct 23, 2024 17:53:51.365056992 CEST	443	53856	40.69.42.241	192.168.2.4
Oct 23, 2024 17:53:51.365143061 CEST	53856	443	192.168.2.4	40.69.42.241
Oct 23, 2024 17:53:51.369383097 CEST	53856	443	192.168.2.4	40.69.42.241
Oct 23, 2024 17:53:51.369395018 CEST	443	53856	40.69.42.241	192.168.2.4
Oct 23, 2024 17:53:51.369671106 CEST	443	53856	40.69.42.241	192.168.2.4
Oct 23, 2024 17:53:51.379055977 CEST	53856	443	192.168.2.4	40.69.42.241
Oct 23, 2024 17:53:51.423337936 CEST	443	53856	40.69.42.241	192.168.2.4
Oct 23, 2024 17:53:51.620047092 CEST	443	53856	40.69.42.241	192.168.2.4
Oct 23, 2024 17:53:51.620290041 CEST	53856	443	192.168.2.4	40.69.42.241
Oct 23, 2024 17:53:51.620316029 CEST	443	53856	40.69.42.241	192.168.2.4
Oct 23, 2024 17:53:51.620326996 CEST	53856	443	192.168.2.4	40.69.42.241
Oct 23, 2024 17:53:51.620455980 CEST	443	53856	40.69.42.241	192.168.2.4
Oct 23, 2024 17:53:51.620491982 CEST	443	53856	40.69.42.241	192.168.2.4
Oct 23, 2024 17:53:51.620532990 CEST	53856	443	192.168.2.4	40.69.42.241
Oct 23, 2024 17:53:51.653935909 CEST	53857	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:51.653980017 CEST	443	53857	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:51.654098034 CEST	53857	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:51.654427052 CEST	53857	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:51.654448986 CEST	443	53857	4.175.87.197	192.168.2.4
Oct 23, 2024 17:53:51.756160975 CEST	53857	443	192.168.2.4	4.175.87.197
Oct 23, 2024 17:53:51.798893929 CEST	53858	443	192.168.2.4	172.202.163.200
Oct 23, 2024 17:53:51.798996925 CEST	443	53858	172.202.163.200	192.168.2.4
Oct 23, 2024 17:53:51.799091101 CEST	53858	443	192.168.2.4	172.202.163.200
Oct 23, 2024 17:53:51.799979925 CEST	53858	443	192.168.2.4	172.202.163.200
Oct 23, 2024 17:53:51.800009012 CEST	443	53858	172.202.163.200	192.168.2.4
Oct 23, 2024 17:53:52.568258047 CEST	443	53858	172.202.163.200	192.168.2.4
Oct 23, 2024 17:53:52.568397045 CEST	53858	443	192.168.2.4	172.202.163.200
Oct 23, 2024 17:53:52.570048094 CEST	53858	443	192.168.2.4	172.202.163.200
Oct 23, 2024 17:53:52.570080996 CEST	443	53858	172.202.163.200	192.168.2.4
Oct 23, 2024 17:53:52.570583105 CEST	443	53858	172.202.163.200	192.168.2.4
Oct 23, 2024 17:53:52.573074102 CEST	53858	443	192.168.2.4	172.202.163.200
Oct 23, 2024 17:53:52.615339994 CEST	443	53858	172.202.163.200	192.168.2.4
Oct 23, 2024 17:53:52.725387096 CEST	443	53858	172.202.163.200	192.168.2.4
Oct 23, 2024 17:53:52.725709915 CEST	53858	443	192.168.2.4	172.202.163.200
Oct 23, 2024 17:53:52.725752115 CEST	443	53858	172.202.163.200	192.168.2.4
Oct 23, 2024 17:53:52.725771904 CEST	53858	443	192.168.2.4	172.202.163.200
Oct 23, 2024 17:53:52.726110935 CEST	443	53858	172.202.163.200	192.168.2.4
Oct 23, 2024 17:53:52.726195097 CEST	443	53858	172.202.163.200	192.168.2.4
Oct 23, 2024 17:53:52.726260900 CEST	53858	443	192.168.2.4	172.202.163.200
Oct 23, 2024 17:53:53.791949034 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:53.792000055 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:53.792152882 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:53.792612076 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:53.792627096 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.607008934 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.607099056 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:54.608725071 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:54.608751059 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.609015942 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.610040903 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:54.655333042 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.878189087 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.878226995 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.878247976 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.878329039 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:54.878366947 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.878416061 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:54.878906012 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.878981113 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:54.878989935 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.879452944 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.881351948 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:54.888286114 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:54.888312101 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:54.888329983 CEST	53859	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:54.888336897 CEST	443	53859	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:55.401909113 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:55.401943922 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:55.402015924 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:55.403538942 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:55.403553963 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.205326080 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.205401897 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:56.206924915 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:56.206948996 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.207225084 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.208409071 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:56.251323938 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.474142075 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.474168062 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.474185944 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.474268913 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:56.474283934 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.474335909 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:56.476677895 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.476720095 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.476735115 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:56.476746082 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.476777077 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.476794958 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:56.476830006 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:56.516804934 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:56.516834021 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:53:56.516848087 CEST	53860	443	192.168.2.4	20.109.210.53
Oct 23, 2024 17:53:56.516855955 CEST	443	53860	20.109.210.53	192.168.2.4
Oct 23, 2024 17:54:06.518805981 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:54:06.563342094 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:54:06.596314907 CEST	53861	443	192.168.2.4	40.99.214.34
Oct 23, 2024 17:54:06.596370935 CEST	443	53861	40.99.214.34	192.168.2.4
Oct 23, 2024 17:54:06.596457958 CEST	53861	443	192.168.2.4	40.99.214.34
Oct 23, 2024 17:54:06.596829891 CEST	53861	443	192.168.2.4	40.99.214.34
Oct 23, 2024 17:54:06.596851110 CEST	443	53861	40.99.214.34	192.168.2.4
Oct 23, 2024 17:54:06.887964010 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:54:06.888721943 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:54:06.888777018 CEST	443	49752	52.98.179.66	192.168.2.4
Oct 23, 2024 17:54:06.888885021 CEST	49752	443	192.168.2.4	52.98.179.66
Oct 23, 2024 17:54:07.711421013 CEST	443	53861	40.99.214.34	192.168.2.4
Oct 23, 2024 17:54:07.711724997 CEST	53861	443	192.168.2.4	40.99.214.34
Oct 23, 2024 17:54:07.711741924 CEST	443	53861	40.99.214.34	192.168.2.4
Oct 23, 2024 17:54:07.712841988 CEST	443	53861	40.99.214.34	192.168.2.4
Oct 23, 2024 17:54:07.712913990 CEST	53861	443	192.168.2.4	40.99.214.34
Oct 23, 2024 17:54:07.712932110 CEST	443	53861	40.99.214.34	192.168.2.4
Oct 23, 2024 17:54:07.712975979 CEST	53861	443	192.168.2.4	40.99.214.34
Oct 23, 2024 17:54:07.713551998 CEST	53861	443	192.168.2.4	40.99.214.34
Oct 23, 2024 17:54:07.713624954 CEST	443	53861	40.99.214.34	192.168.2.4
Oct 23, 2024 17:54:07.755815983 CEST	53861	443	192.168.2.4	40.99.214.34
Oct 23, 2024 17:54:07.755842924 CEST	443	53861	40.99.214.34	192.168.2.4
Oct 23, 2024 17:54:07.802679062 CEST	53861	443	192.168.2.4	40.99.214.34
Oct 23, 2024 17:54:09.141604900 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:09.141644955 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:09.141822100 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:09.142600060 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:09.142617941 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:09.902681112 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:09.902776003 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:09.905073881 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:09.905086040 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:09.905380964 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:09.950660944 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:09.991339922 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.146576881 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.146605015 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.146614075 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.146624088 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.146665096 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.146681070 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.146711111 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.146740913 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.146770000 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.203349113 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.203377008 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.203432083 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.203450918 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.203483105 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.203514099 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.264132023 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.264163017 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.264247894 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.264265060 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.264372110 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.320322990 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.320349932 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.320398092 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.320415020 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.320451975 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.320480108 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.322316885 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.322340965 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.322396040 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.322405100 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.322444916 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.322462082 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.381438971 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.381480932 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.381614923 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.381632090 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.381678104 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.382421017 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.382457972 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.382503986 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.382512093 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.382561922 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.382575989 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.438492060 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.438523054 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.438591957 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.438607931 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.438649893 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.438674927 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.439721107 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.439747095 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.439789057 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.439798117 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.439836979 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.439851999 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.440900087 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.440923929 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.440967083 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.440973997 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.441010952 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.441024065 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.441710949 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.441731930 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.441760063 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.441766024 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.441791058 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.441816092 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.443461895 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.443481922 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.443521976 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.443528891 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.443557978 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.443578959 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.444665909 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.444686890 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.444736958 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.444744110 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.444801092 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.498897076 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.498981953 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.499099970 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.499100924 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.499100924 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.499409914 CEST	53862	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.499432087 CEST	443	53862	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.682478905 CEST	53863	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.682547092 CEST	443	53863	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.682658911 CEST	53863	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.684855938 CEST	53864	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.684915066 CEST	443	53864	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.685054064 CEST	53864	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.686433077 CEST	53865	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.686491966 CEST	443	53865	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.686592102 CEST	53865	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.689769030 CEST	53866	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.689788103 CEST	443	53866	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.689939022 CEST	53866	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.690118074 CEST	53865	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.690154076 CEST	443	53865	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.690579891 CEST	53866	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.690591097 CEST	443	53866	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.690619946 CEST	53863	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.690635920 CEST	443	53863	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.690802097 CEST	53864	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.690810919 CEST	443	53864	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.692704916 CEST	53867	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.692754984 CEST	443	53867	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:10.692881107 CEST	53867	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.693118095 CEST	53867	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:10.693131924 CEST	443	53867	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.443002939 CEST	443	53864	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.443727970 CEST	53864	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.443754911 CEST	443	53864	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.444482088 CEST	53864	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.444488049 CEST	443	53864	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.448230028 CEST	443	53865	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.448755026 CEST	53865	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.448782921 CEST	443	53865	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.449251890 CEST	53865	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.449259996 CEST	443	53865	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.455833912 CEST	443	53866	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.456365108 CEST	53866	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.456374884 CEST	443	53866	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.456852913 CEST	53866	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.456859112 CEST	443	53866	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.457935095 CEST	443	53867	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.458406925 CEST	53867	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.458432913 CEST	443	53867	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.458544016 CEST	443	53863	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.458955050 CEST	53867	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.458966970 CEST	443	53867	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.458992958 CEST	53863	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.459012032 CEST	443	53863	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.459367990 CEST	53863	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.459374905 CEST	443	53863	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.604763031 CEST	443	53864	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.604829073 CEST	443	53865	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.604841948 CEST	443	53864	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.604846954 CEST	443	53865	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.604897022 CEST	53864	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.604901075 CEST	443	53865	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.604923010 CEST	53865	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.605215073 CEST	53865	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.605283022 CEST	53864	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.605305910 CEST	443	53864	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605309010 CEST	53865	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.605309010 CEST	53865	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.605313063 CEST	53864	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.605319977 CEST	443	53864	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605339050 CEST	443	53865	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605346918 CEST	443	53865	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605439901 CEST	443	53866	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605473042 CEST	443	53866	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605515003 CEST	443	53866	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605521917 CEST	53866	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.605552912 CEST	443	53867	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605556965 CEST	53866	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.605612993 CEST	443	53867	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605701923 CEST	53867	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.605765104 CEST	443	53863	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605791092 CEST	443	53863	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605837107 CEST	53863	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.605839968 CEST	443	53863	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.605875969 CEST	53863	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.606509924 CEST	53866	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.606518030 CEST	443	53866	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.606534004 CEST	53866	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.606538057 CEST	443	53866	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.606941938 CEST	53867	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.606951952 CEST	443	53867	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.607007980 CEST	53867	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.607013941 CEST	443	53867	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.607526064 CEST	53863	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.607543945 CEST	443	53863	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.607557058 CEST	53863	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.607562065 CEST	443	53863	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.611027002 CEST	53868	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.611080885 CEST	443	53868	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.611093998 CEST	53869	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.611133099 CEST	443	53869	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.611155033 CEST	53868	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.611187935 CEST	53869	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.611495972 CEST	53869	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.611495972 CEST	53868	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.611506939 CEST	443	53869	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.611509085 CEST	443	53868	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.612689018 CEST	53870	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.612709045 CEST	443	53870	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.612833023 CEST	53870	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.612973928 CEST	53870	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.612982988 CEST	443	53870	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.613509893 CEST	53872	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.613528013 CEST	53871	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.613540888 CEST	443	53872	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.613542080 CEST	443	53871	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.613630056 CEST	53871	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.613749027 CEST	53872	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.613749027 CEST	53872	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.613778114 CEST	443	53872	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:11.613826990 CEST	53871	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:11.613835096 CEST	443	53871	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.354250908 CEST	443	53869	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.355539083 CEST	53869	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.355561018 CEST	443	53869	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.356764078 CEST	53869	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.356769085 CEST	443	53869	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.357420921 CEST	443	53871	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.357851028 CEST	53871	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.357857943 CEST	443	53871	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.358972073 CEST	53871	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.358975887 CEST	443	53871	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.367858887 CEST	443	53868	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.374677896 CEST	443	53870	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.380315065 CEST	443	53872	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.392834902 CEST	53868	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.392863035 CEST	443	53868	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.393615961 CEST	53868	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.393621922 CEST	443	53868	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.394510031 CEST	53870	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.394517899 CEST	443	53870	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.395154953 CEST	53870	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.395159960 CEST	443	53870	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.395622969 CEST	53872	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.395648003 CEST	443	53872	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.396358013 CEST	53872	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.396363020 CEST	443	53872	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.493278980 CEST	443	53869	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.493551970 CEST	443	53869	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.493644953 CEST	53869	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.493843079 CEST	53869	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.493865013 CEST	443	53869	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.496253967 CEST	443	53871	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.496463060 CEST	443	53871	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.496527910 CEST	53871	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.496850014 CEST	53871	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.496865034 CEST	443	53871	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.501908064 CEST	53873	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.501946926 CEST	443	53873	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.502202034 CEST	53873	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.503211975 CEST	53874	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.503273010 CEST	443	53874	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.503386974 CEST	53874	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.503475904 CEST	53873	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.503488064 CEST	443	53873	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.503763914 CEST	53874	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.503789902 CEST	443	53874	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.526051998 CEST	443	53870	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.526051998 CEST	443	53868	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.526153088 CEST	443	53868	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.526206970 CEST	53868	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.526276112 CEST	443	53870	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.526326895 CEST	53870	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.526451111 CEST	53868	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.526467085 CEST	443	53868	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.526485920 CEST	53868	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.526492119 CEST	443	53868	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.528842926 CEST	53870	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.528867006 CEST	443	53870	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.528882027 CEST	53870	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.528887987 CEST	443	53870	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.533545971 CEST	443	53872	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.533607006 CEST	53875	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.533621073 CEST	443	53872	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.533624887 CEST	443	53875	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.533664942 CEST	53872	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.533701897 CEST	53875	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.534044027 CEST	53872	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.534075022 CEST	443	53872	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.534090042 CEST	53872	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.534099102 CEST	443	53872	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.535995960 CEST	53875	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.536010027 CEST	443	53875	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.539138079 CEST	53876	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.539167881 CEST	443	53876	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.539243937 CEST	53876	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.540273905 CEST	53877	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.540307045 CEST	443	53877	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.540636063 CEST	53876	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.540647030 CEST	443	53876	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:12.540661097 CEST	53877	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.540894032 CEST	53877	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:12.540906906 CEST	443	53877	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.275899887 CEST	443	53874	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.276529074 CEST	53874	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.276565075 CEST	443	53874	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.277031898 CEST	53874	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.277038097 CEST	443	53874	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.280040026 CEST	443	53873	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.280494928 CEST	53873	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.280534029 CEST	443	53873	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.280848980 CEST	53873	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.280853987 CEST	443	53873	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.287445068 CEST	443	53876	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.287883997 CEST	53876	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.287900925 CEST	443	53876	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.288564920 CEST	53876	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.288568974 CEST	443	53876	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.298763990 CEST	443	53877	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.299185038 CEST	53877	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.299211979 CEST	443	53877	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.299634933 CEST	53877	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.299640894 CEST	443	53877	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.311309099 CEST	443	53875	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.312156916 CEST	53875	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.312166929 CEST	443	53875	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.312634945 CEST	53875	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.312639952 CEST	443	53875	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.418123960 CEST	443	53874	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.418193102 CEST	443	53874	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.418252945 CEST	53874	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.418356895 CEST	443	53873	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.418644905 CEST	53874	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.418673038 CEST	443	53874	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.418684006 CEST	443	53873	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.418689013 CEST	53874	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.418695927 CEST	443	53874	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.418737888 CEST	53873	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.420355082 CEST	53873	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.420376062 CEST	443	53873	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.420480013 CEST	53873	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.420486927 CEST	443	53873	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.420824051 CEST	443	53876	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.421061039 CEST	443	53876	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.421117067 CEST	53876	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.422333002 CEST	53876	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.422353983 CEST	443	53876	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.422365904 CEST	53876	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.422373056 CEST	443	53876	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.426685095 CEST	53878	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.426707983 CEST	443	53878	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.426762104 CEST	53878	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.428448915 CEST	53879	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.428488970 CEST	443	53879	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.428692102 CEST	53879	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.429303885 CEST	53878	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.429316044 CEST	443	53878	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.430064917 CEST	53879	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.430078983 CEST	443	53879	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.432615995 CEST	53880	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.432656050 CEST	443	53880	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.432862997 CEST	53880	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.433036089 CEST	53880	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.433052063 CEST	443	53880	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.436321020 CEST	443	53877	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.436389923 CEST	443	53877	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.436455965 CEST	53877	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.436758995 CEST	53877	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.436768055 CEST	443	53877	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.439573050 CEST	53881	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.439606905 CEST	443	53881	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.439886093 CEST	53881	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.440042973 CEST	53881	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.440057039 CEST	443	53881	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.451070070 CEST	443	53875	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.451148033 CEST	443	53875	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.451395035 CEST	53875	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.451455116 CEST	53875	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.451468945 CEST	443	53875	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.451486111 CEST	53875	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.451492071 CEST	443	53875	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.454566002 CEST	53882	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.454607964 CEST	443	53882	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:13.454863071 CEST	53882	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.455041885 CEST	53882	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:13.455055952 CEST	443	53882	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.171194077 CEST	443	53879	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.171812057 CEST	53879	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.171875000 CEST	443	53879	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.172395945 CEST	53879	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.172409058 CEST	443	53879	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.195512056 CEST	443	53878	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.196034908 CEST	53878	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.196055889 CEST	443	53878	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.196438074 CEST	443	53880	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.196851015 CEST	53878	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.196856976 CEST	443	53878	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.197516918 CEST	53880	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.197544098 CEST	443	53880	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.197979927 CEST	53880	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.197988033 CEST	443	53880	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.206679106 CEST	443	53881	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.207084894 CEST	53881	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.207112074 CEST	443	53881	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.207454920 CEST	53881	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.207461119 CEST	443	53881	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.215648890 CEST	443	53882	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.216063976 CEST	53882	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.216084957 CEST	443	53882	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.216814995 CEST	53882	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.216820002 CEST	443	53882	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.307277918 CEST	443	53879	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.307441950 CEST	443	53879	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.307555914 CEST	53879	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.307624102 CEST	53879	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.307646990 CEST	443	53879	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.307658911 CEST	53879	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.307665110 CEST	443	53879	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.310640097 CEST	53883	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.310683012 CEST	443	53883	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.310758114 CEST	53883	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.310902119 CEST	53883	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.310913086 CEST	443	53883	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.333966017 CEST	443	53878	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.334036112 CEST	443	53878	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.334223986 CEST	53878	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.334557056 CEST	53878	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.334577084 CEST	443	53878	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.334589958 CEST	53878	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.334594965 CEST	443	53878	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.337922096 CEST	53884	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.337970972 CEST	443	53884	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.338154078 CEST	443	53880	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.338161945 CEST	53884	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.338355064 CEST	53884	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.338368893 CEST	443	53884	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.338423967 CEST	443	53880	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.338577032 CEST	53880	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.338753939 CEST	53880	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.338768959 CEST	443	53880	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.338849068 CEST	53880	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.338855028 CEST	443	53880	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.341645002 CEST	53885	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.341715097 CEST	443	53885	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.341831923 CEST	53885	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.342046976 CEST	53885	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.342081070 CEST	443	53885	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.344773054 CEST	443	53881	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.344841003 CEST	443	53881	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.344953060 CEST	53881	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.345096111 CEST	53881	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.345114946 CEST	443	53881	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.345127106 CEST	53881	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.345133066 CEST	443	53881	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.347913980 CEST	53886	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.347955942 CEST	443	53886	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.348804951 CEST	53886	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.348804951 CEST	53886	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.348855972 CEST	443	53886	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.351696014 CEST	443	53882	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.352257967 CEST	443	53882	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.352402925 CEST	53882	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.352444887 CEST	53882	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.352444887 CEST	53882	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.352456093 CEST	443	53882	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.352467060 CEST	443	53882	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.354990005 CEST	53887	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.355046034 CEST	443	53887	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:14.355251074 CEST	53887	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.355402946 CEST	53887	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:14.355426073 CEST	443	53887	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.065428972 CEST	443	53883	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.065978050 CEST	53883	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.065996885 CEST	443	53883	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.066489935 CEST	53883	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.066497087 CEST	443	53883	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.104029894 CEST	443	53884	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.106093884 CEST	53884	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.106093884 CEST	53884	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.106117010 CEST	443	53884	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.106122017 CEST	443	53884	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.114972115 CEST	443	53886	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.115881920 CEST	53886	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.115881920 CEST	53886	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.115907907 CEST	443	53886	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.115931034 CEST	443	53886	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.116187096 CEST	443	53885	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.116550922 CEST	53885	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.116566896 CEST	443	53885	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.117371082 CEST	53885	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.117381096 CEST	443	53885	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.119472027 CEST	443	53887	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.120049000 CEST	53887	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.120059967 CEST	443	53887	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.120676994 CEST	53887	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.120683908 CEST	443	53887	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.204412937 CEST	443	53883	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.204619884 CEST	443	53883	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.204689980 CEST	53883	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.204818964 CEST	53883	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.204837084 CEST	443	53883	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.204847097 CEST	53883	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.204853058 CEST	443	53883	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.208374023 CEST	53888	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.208421946 CEST	443	53888	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.208494902 CEST	53888	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.208684921 CEST	53888	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.208697081 CEST	443	53888	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.239160061 CEST	443	53884	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.239476919 CEST	443	53884	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.239577055 CEST	53884	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.239741087 CEST	53884	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.239741087 CEST	53884	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.239767075 CEST	443	53884	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.239778996 CEST	443	53884	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.243129015 CEST	53889	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.243172884 CEST	443	53889	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.243241072 CEST	53889	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.243443966 CEST	53889	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.243458033 CEST	443	53889	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.252218962 CEST	443	53886	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.252284050 CEST	443	53886	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.252346039 CEST	53886	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.252558947 CEST	53886	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.252558947 CEST	53886	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.252573967 CEST	443	53886	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.252583027 CEST	443	53886	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.254575014 CEST	443	53885	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.254729033 CEST	443	53885	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.254925013 CEST	53885	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.255068064 CEST	53885	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.255079985 CEST	443	53885	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.255095005 CEST	53885	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.255100965 CEST	443	53885	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.255639076 CEST	53890	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.255666018 CEST	443	53890	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.255764961 CEST	53890	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.255979061 CEST	53890	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.255991936 CEST	443	53890	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.257528067 CEST	53891	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.257560968 CEST	443	53891	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.257668972 CEST	53891	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.257824898 CEST	53891	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.257837057 CEST	443	53891	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.258239031 CEST	443	53887	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.258313894 CEST	443	53887	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.258367062 CEST	53887	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.258502007 CEST	53887	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.258510113 CEST	443	53887	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.258521080 CEST	53887	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.258526087 CEST	443	53887	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.260560989 CEST	53892	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.260592937 CEST	443	53892	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.260785103 CEST	53892	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.260890961 CEST	53892	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.260905027 CEST	443	53892	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.981522083 CEST	443	53888	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.982192039 CEST	53888	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.982207060 CEST	443	53888	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.982714891 CEST	53888	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:15.982718945 CEST	443	53888	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:15.999665976 CEST	443	53890	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.000264883 CEST	53890	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.000277996 CEST	443	53890	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.000689983 CEST	53890	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.000694990 CEST	443	53890	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.002912045 CEST	443	53889	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.003423929 CEST	53889	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.003448963 CEST	443	53889	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.003765106 CEST	53889	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.003772020 CEST	443	53889	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.008130074 CEST	443	53891	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.008523941 CEST	53891	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.008538961 CEST	443	53891	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.008874893 CEST	53891	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.008879900 CEST	443	53891	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.022931099 CEST	443	53892	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.023670912 CEST	53892	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.023691893 CEST	443	53892	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.024506092 CEST	53892	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.024518967 CEST	443	53892	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.122570038 CEST	443	53888	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.122755051 CEST	443	53888	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.122870922 CEST	53888	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.123085022 CEST	53888	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.123101950 CEST	443	53888	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.123116016 CEST	53888	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.123121977 CEST	443	53888	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.126641989 CEST	53893	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.126729965 CEST	443	53893	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.126856089 CEST	53893	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.127005100 CEST	53893	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.127031088 CEST	443	53893	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.135122061 CEST	443	53890	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.135185957 CEST	443	53890	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.135267973 CEST	53890	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.135679007 CEST	53890	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.135696888 CEST	443	53890	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.135708094 CEST	53890	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.135711908 CEST	443	53890	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.141566038 CEST	443	53889	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.141647100 CEST	443	53889	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.141700983 CEST	53889	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.141872883 CEST	53894	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.141921997 CEST	443	53894	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.141954899 CEST	53889	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.141973972 CEST	443	53889	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.142059088 CEST	53894	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.142339945 CEST	53894	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.142352104 CEST	443	53894	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.144881964 CEST	53895	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.144917011 CEST	443	53895	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.144916058 CEST	443	53891	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.144992113 CEST	53895	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.145277023 CEST	443	53891	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.145338058 CEST	53891	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.145476103 CEST	53895	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.145484924 CEST	443	53895	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.145575047 CEST	53891	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.145581961 CEST	443	53891	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.145596981 CEST	53891	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.145601034 CEST	443	53891	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.148010969 CEST	53896	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.148053885 CEST	443	53896	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.148427963 CEST	53896	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.148601055 CEST	53896	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.148612022 CEST	443	53896	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.161535025 CEST	443	53892	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.161710024 CEST	443	53892	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.162079096 CEST	53892	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.162079096 CEST	53892	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.162271976 CEST	53892	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.162290096 CEST	443	53892	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.165328979 CEST	53897	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.165379047 CEST	443	53897	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.165447950 CEST	53897	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.165678024 CEST	53897	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.165688038 CEST	443	53897	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.878839970 CEST	443	53893	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.880017042 CEST	53893	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.880058050 CEST	443	53893	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.880702019 CEST	53893	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.880714893 CEST	443	53893	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.899889946 CEST	443	53895	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.900880098 CEST	53895	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.900907040 CEST	443	53895	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.901803970 CEST	53895	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.901817083 CEST	443	53895	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.903253078 CEST	443	53896	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.903793097 CEST	53896	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.903831959 CEST	443	53896	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.904448986 CEST	443	53894	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.904781103 CEST	53896	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.904788017 CEST	443	53896	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.906008959 CEST	53894	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.906008959 CEST	53894	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.906042099 CEST	443	53894	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.906054974 CEST	443	53894	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.932919025 CEST	443	53897	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.933939934 CEST	53897	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.933964014 CEST	443	53897	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:16.935231924 CEST	53897	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:16.935239077 CEST	443	53897	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.017668962 CEST	443	53893	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.017751932 CEST	443	53893	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.018030882 CEST	53893	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.018199921 CEST	53893	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.018212080 CEST	443	53893	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.018224001 CEST	53893	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.018229008 CEST	443	53893	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.024324894 CEST	53898	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.024374008 CEST	443	53898	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.024507999 CEST	53898	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.025017023 CEST	53898	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.025031090 CEST	443	53898	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.037837982 CEST	443	53895	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.037945032 CEST	443	53895	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.038028002 CEST	53895	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.038402081 CEST	53895	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.038414001 CEST	443	53895	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.040245056 CEST	443	53896	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.040338993 CEST	443	53896	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.040491104 CEST	53896	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.040865898 CEST	53896	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.040889025 CEST	443	53896	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.043140888 CEST	443	53894	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.043211937 CEST	443	53894	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.043329954 CEST	53894	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.043617010 CEST	53894	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.043617010 CEST	53894	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.043653965 CEST	443	53894	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.043672085 CEST	443	53894	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.053284883 CEST	53899	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.053329945 CEST	443	53899	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.053510904 CEST	53899	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.054888010 CEST	53900	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.054922104 CEST	443	53900	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.055049896 CEST	53900	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.055754900 CEST	53899	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.055768013 CEST	443	53899	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.056071043 CEST	53900	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.056082010 CEST	443	53900	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.057610035 CEST	53901	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.057636976 CEST	443	53901	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.057704926 CEST	53901	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.058069944 CEST	53901	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.058084011 CEST	443	53901	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.072732925 CEST	443	53897	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.072833061 CEST	443	53897	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.073071957 CEST	53897	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.073438883 CEST	53897	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.073456049 CEST	443	53897	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.073486090 CEST	53897	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.073492050 CEST	443	53897	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.078916073 CEST	53902	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.078955889 CEST	443	53902	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.079057932 CEST	53902	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.079581976 CEST	53902	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.079590082 CEST	443	53902	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.776046991 CEST	443	53898	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.776710987 CEST	53898	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.776734114 CEST	443	53898	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.777225971 CEST	53898	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.777241945 CEST	443	53898	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.797910929 CEST	443	53901	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.798499107 CEST	53901	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.798526049 CEST	443	53901	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.799141884 CEST	53901	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.799149036 CEST	443	53901	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.816764116 CEST	443	53900	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.817368984 CEST	53900	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.817387104 CEST	443	53900	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.817895889 CEST	53900	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.817900896 CEST	443	53900	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.821250916 CEST	443	53899	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.821749926 CEST	53899	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.821785927 CEST	443	53899	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.822232008 CEST	53899	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.822244883 CEST	443	53899	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.833758116 CEST	443	53902	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.835336924 CEST	53902	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.835350037 CEST	443	53902	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.836033106 CEST	53902	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.836038113 CEST	443	53902	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.912847042 CEST	443	53898	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.912983894 CEST	443	53898	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.913039923 CEST	53898	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.913408995 CEST	53898	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.913439989 CEST	443	53898	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.913453102 CEST	53898	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.913463116 CEST	443	53898	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.917006969 CEST	53903	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.917056084 CEST	443	53903	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.917118073 CEST	53903	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.917366028 CEST	53903	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.917382002 CEST	443	53903	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.934412003 CEST	443	53901	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.934504032 CEST	443	53901	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.934565067 CEST	53901	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.934778929 CEST	53901	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.934792042 CEST	443	53901	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.934806108 CEST	53901	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.934811115 CEST	443	53901	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.938033104 CEST	53904	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.938082933 CEST	443	53904	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.938169956 CEST	53904	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.938414097 CEST	53904	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.938427925 CEST	443	53904	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.954658031 CEST	443	53900	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.954874039 CEST	443	53900	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.954977989 CEST	53900	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.954977989 CEST	53900	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.955066919 CEST	53900	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.955085039 CEST	443	53900	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.958036900 CEST	53905	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.958100080 CEST	443	53905	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.958163977 CEST	53905	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.958308935 CEST	53905	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.958329916 CEST	443	53905	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.961025953 CEST	443	53899	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.961108923 CEST	443	53899	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.961158991 CEST	53899	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.961343050 CEST	53899	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.961363077 CEST	443	53899	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.961376905 CEST	53899	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.961383104 CEST	443	53899	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.964169979 CEST	53906	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.964204073 CEST	443	53906	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.964260101 CEST	53906	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.964509010 CEST	53906	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.964524031 CEST	443	53906	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.971905947 CEST	443	53902	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.972125053 CEST	443	53902	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.972259998 CEST	53902	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.972259998 CEST	53902	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.972286940 CEST	53902	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.972296953 CEST	443	53902	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.975452900 CEST	53907	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.975503922 CEST	443	53907	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:17.975565910 CEST	53907	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.975743055 CEST	53907	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:17.975763083 CEST	443	53907	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.674523115 CEST	443	53903	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.675456047 CEST	53903	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.675487041 CEST	443	53903	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.676397085 CEST	53903	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.676402092 CEST	443	53903	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.688754082 CEST	443	53904	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.689755917 CEST	53904	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.689788103 CEST	443	53904	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.691176891 CEST	53904	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.691189051 CEST	443	53904	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.698817015 CEST	443	53905	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.699596882 CEST	53905	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.699632883 CEST	443	53905	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.700490952 CEST	53905	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.700498104 CEST	443	53905	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.731694937 CEST	443	53906	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.732213974 CEST	53906	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.732265949 CEST	443	53906	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.733189106 CEST	53906	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.733201027 CEST	443	53906	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.736798048 CEST	443	53907	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.737375021 CEST	53907	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.737406969 CEST	443	53907	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.738224983 CEST	53907	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.738234997 CEST	443	53907	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.813781023 CEST	443	53903	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.813865900 CEST	443	53903	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.813925982 CEST	53903	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.814408064 CEST	53903	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.814428091 CEST	443	53903	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.819407940 CEST	53908	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.819433928 CEST	443	53908	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.819510937 CEST	53908	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.819919109 CEST	53908	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.819931030 CEST	443	53908	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.825938940 CEST	443	53904	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.826031923 CEST	443	53904	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.826076984 CEST	53904	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.826286077 CEST	53904	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.826304913 CEST	443	53904	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.826317072 CEST	53904	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.826330900 CEST	443	53904	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.830502033 CEST	53909	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.830538034 CEST	443	53909	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.830641031 CEST	53909	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.830912113 CEST	53909	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.830921888 CEST	443	53909	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.834359884 CEST	443	53905	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.834422112 CEST	443	53905	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.834515095 CEST	53905	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.834750891 CEST	53905	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.834769011 CEST	443	53905	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.839548111 CEST	53910	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.839562893 CEST	443	53910	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.839714050 CEST	53910	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.839998007 CEST	53910	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.840006113 CEST	443	53910	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.867427111 CEST	443	53906	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.867510080 CEST	443	53906	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.867727041 CEST	53906	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.868624926 CEST	53906	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.868650913 CEST	443	53906	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.868666887 CEST	53906	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.868673086 CEST	443	53906	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.872376919 CEST	53911	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.872407913 CEST	443	53911	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.872510910 CEST	53911	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.872694016 CEST	53911	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.872704983 CEST	443	53911	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.874326944 CEST	443	53907	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.874387980 CEST	443	53907	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.874703884 CEST	53907	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.874819040 CEST	53907	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.874840975 CEST	443	53907	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.874856949 CEST	53907	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.874865055 CEST	443	53907	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.880078077 CEST	53912	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.880105019 CEST	443	53912	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:18.880290985 CEST	53912	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.880460024 CEST	53912	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:18.880470037 CEST	443	53912	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.574049950 CEST	443	53908	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.574759007 CEST	53908	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.574791908 CEST	443	53908	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.576250076 CEST	53908	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.576257944 CEST	443	53908	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.602700949 CEST	443	53909	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.603507042 CEST	53909	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.603532076 CEST	443	53909	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.603960991 CEST	53909	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.603967905 CEST	443	53909	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.608716965 CEST	443	53910	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.609198093 CEST	53910	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.609215975 CEST	443	53910	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.609694958 CEST	53910	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.609700918 CEST	443	53910	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.624094963 CEST	443	53911	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.625546932 CEST	53911	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.625561953 CEST	443	53911	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.627351046 CEST	53911	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.627357960 CEST	443	53911	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.628223896 CEST	443	53912	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.629810095 CEST	53912	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.629825115 CEST	443	53912	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.632296085 CEST	53912	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.632304907 CEST	443	53912	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.728014946 CEST	443	53908	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.728111029 CEST	443	53908	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.728168964 CEST	53908	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.729007959 CEST	53908	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.729034901 CEST	443	53908	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.729048967 CEST	53908	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.729054928 CEST	443	53908	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.734201908 CEST	53913	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.734253883 CEST	443	53913	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.734338045 CEST	53913	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.734648943 CEST	53913	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.734663963 CEST	443	53913	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.742501020 CEST	443	53909	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.742573977 CEST	443	53909	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.742674112 CEST	53909	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.747817993 CEST	53909	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.747834921 CEST	443	53909	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.748281956 CEST	443	53910	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.748374939 CEST	443	53910	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.748435020 CEST	53910	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.749986887 CEST	53910	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.749996901 CEST	443	53910	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.763708115 CEST	443	53912	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.763794899 CEST	443	53912	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.763923883 CEST	53912	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.764214039 CEST	53914	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.764242887 CEST	443	53914	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.764360905 CEST	53914	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.764913082 CEST	53914	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.764925957 CEST	443	53914	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.768126965 CEST	53915	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.768163919 CEST	443	53915	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.768244982 CEST	53915	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.768527031 CEST	53912	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.768527031 CEST	53912	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.768537045 CEST	443	53912	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.768544912 CEST	443	53912	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.770576954 CEST	53915	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.770598888 CEST	443	53915	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.774765968 CEST	53916	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.774796963 CEST	443	53916	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.775039911 CEST	53916	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.775515079 CEST	443	53911	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.775624990 CEST	53916	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.775638103 CEST	443	53916	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.775641918 CEST	443	53911	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.775695086 CEST	53911	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.776026964 CEST	53911	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.776042938 CEST	443	53911	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.776052952 CEST	53911	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.776060104 CEST	443	53911	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.780416012 CEST	53917	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.780467987 CEST	443	53917	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:19.780621052 CEST	53917	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.783567905 CEST	53917	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:19.783584118 CEST	443	53917	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.412461996 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 23, 2024 17:54:20.418262005 CEST	80	49724	199.232.214.172	192.168.2.4
Oct 23, 2024 17:54:20.418318987 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 23, 2024 17:54:20.495762110 CEST	443	53913	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.496485949 CEST	53913	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.496503115 CEST	443	53913	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.497345924 CEST	53913	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.497354984 CEST	443	53913	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.515357971 CEST	443	53914	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.516591072 CEST	53914	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.516622066 CEST	443	53914	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.518049002 CEST	53914	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.518063068 CEST	443	53914	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.518851995 CEST	443	53916	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.519351006 CEST	53916	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.519366026 CEST	443	53916	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.520126104 CEST	53916	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.520129919 CEST	443	53916	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.539382935 CEST	443	53915	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.540735006 CEST	53915	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.540754080 CEST	443	53915	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.542242050 CEST	53915	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.542248964 CEST	443	53915	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.550661087 CEST	443	53917	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.551954985 CEST	53917	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.551971912 CEST	443	53917	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.552828074 CEST	53917	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.552833080 CEST	443	53917	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.633644104 CEST	443	53913	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.633934021 CEST	443	53913	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.633996964 CEST	53913	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.653357983 CEST	443	53916	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.653476954 CEST	443	53916	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.653538942 CEST	53916	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.655533075 CEST	53913	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.655554056 CEST	443	53913	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.655580997 CEST	53913	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.655587912 CEST	443	53913	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.656155109 CEST	443	53914	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.656282902 CEST	443	53914	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.656325102 CEST	53914	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.660474062 CEST	53916	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.660490036 CEST	443	53916	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.661640882 CEST	53914	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.661664963 CEST	443	53914	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.661747932 CEST	53914	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.661755085 CEST	443	53914	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.675339937 CEST	53918	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.675365925 CEST	443	53918	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.675452948 CEST	53918	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.678447962 CEST	443	53915	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.678507090 CEST	443	53915	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.678519964 CEST	53919	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.678550959 CEST	53915	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.678563118 CEST	443	53919	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.678607941 CEST	53919	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.679020882 CEST	53920	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.679056883 CEST	443	53920	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.679107904 CEST	53920	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.680459976 CEST	53920	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.680469990 CEST	443	53920	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.680915117 CEST	53918	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.680938005 CEST	443	53918	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.682089090 CEST	53915	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.682106018 CEST	443	53915	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.686223984 CEST	53919	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.686243057 CEST	443	53919	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.692862034 CEST	443	53917	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.692913055 CEST	443	53917	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.692969084 CEST	53917	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.693033934 CEST	53921	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.693078041 CEST	443	53921	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.693312883 CEST	53921	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.693782091 CEST	53921	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.693795919 CEST	443	53921	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.694344997 CEST	53917	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.694365025 CEST	443	53917	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.694570065 CEST	53917	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.694576979 CEST	443	53917	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.698657036 CEST	53922	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.698677063 CEST	443	53922	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:20.698852062 CEST	53922	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.699206114 CEST	53922	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:20.699213982 CEST	443	53922	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.439977884 CEST	443	53920	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.440151930 CEST	443	53918	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.441656113 CEST	53920	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.441680908 CEST	443	53920	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.443219900 CEST	53920	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.443227053 CEST	443	53920	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.443756104 CEST	53918	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.443782091 CEST	443	53918	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.444890976 CEST	53918	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.444900036 CEST	443	53918	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.455648899 CEST	443	53921	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.456295967 CEST	53921	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.456326962 CEST	443	53921	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.456348896 CEST	443	53922	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.456963062 CEST	53921	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.456970930 CEST	443	53921	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.457501888 CEST	53922	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.457516909 CEST	443	53922	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.458049059 CEST	53922	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.458053112 CEST	443	53922	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.458156109 CEST	443	53919	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.458561897 CEST	53919	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.458584070 CEST	443	53919	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.459290981 CEST	53919	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.459296942 CEST	443	53919	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.576942921 CEST	443	53920	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.577095985 CEST	443	53920	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.577266932 CEST	53920	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.577330112 CEST	53920	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.577352047 CEST	443	53920	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.577368021 CEST	53920	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.577373028 CEST	443	53920	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.578253984 CEST	443	53918	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.578392029 CEST	443	53918	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.578438044 CEST	53918	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.578552961 CEST	53918	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.578574896 CEST	443	53918	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.578587055 CEST	53918	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.578593969 CEST	443	53918	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.580892086 CEST	53923	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.580936909 CEST	443	53923	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.580951929 CEST	53924	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.580996037 CEST	443	53924	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.580996990 CEST	53923	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.581048012 CEST	53924	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.581197023 CEST	53924	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.581197977 CEST	53923	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:21.581212044 CEST	443	53924	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:21.581214905 CEST	443	53923	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.635375977 CEST	443	53921	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.635401011 CEST	443	53922	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.635446072 CEST	443	53919	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.635452032 CEST	443	53921	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.635469913 CEST	443	53922	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.635540009 CEST	53921	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.635572910 CEST	443	53919	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.635593891 CEST	53922	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.635788918 CEST	53922	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.635807991 CEST	443	53922	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.635818005 CEST	53922	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.635823965 CEST	443	53922	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.635925055 CEST	53919	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.635983944 CEST	53921	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.635997057 CEST	443	53921	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.636008978 CEST	53921	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.636014938 CEST	443	53921	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.637093067 CEST	53919	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.637106895 CEST	443	53919	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.637186050 CEST	53919	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.637192965 CEST	443	53919	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.640537024 CEST	53925	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.640564919 CEST	53926	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.640571117 CEST	443	53925	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.640599012 CEST	443	53926	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.640743971 CEST	53926	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.640744925 CEST	53925	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.640907049 CEST	53925	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.640914917 CEST	443	53925	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.641051054 CEST	53926	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.641062975 CEST	443	53926	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.642033100 CEST	53927	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.642052889 CEST	443	53927	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:22.642334938 CEST	53927	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.642471075 CEST	53927	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:22.642481089 CEST	443	53927	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.394629002 CEST	443	53923	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.395271063 CEST	53923	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.395289898 CEST	443	53923	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.395839930 CEST	53923	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.395845890 CEST	443	53923	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.399307013 CEST	443	53924	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.399308920 CEST	443	53927	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.399441957 CEST	443	53925	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.399797916 CEST	53924	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.399831057 CEST	443	53924	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.400247097 CEST	53924	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.400253057 CEST	443	53924	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.400501013 CEST	53927	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.400518894 CEST	443	53927	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.400942087 CEST	53927	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.400947094 CEST	443	53927	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.401310921 CEST	53925	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.401319981 CEST	443	53925	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.401635885 CEST	53925	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.401643038 CEST	443	53925	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.408252954 CEST	443	53926	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.408713102 CEST	53926	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.408729076 CEST	443	53926	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.409178019 CEST	53926	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.409183979 CEST	443	53926	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.530985117 CEST	443	53923	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.531373978 CEST	443	53923	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.531548977 CEST	53923	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.531548977 CEST	53923	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.531702995 CEST	53923	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.531721115 CEST	443	53923	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.534785986 CEST	53928	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.534801006 CEST	443	53927	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.534836054 CEST	443	53928	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.534930944 CEST	53928	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.535093069 CEST	53928	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.535104990 CEST	443	53928	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.535108089 CEST	443	53927	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.535160065 CEST	53927	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.535193920 CEST	53927	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.535193920 CEST	53927	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.535212994 CEST	443	53927	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.535223961 CEST	443	53927	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.537446022 CEST	53929	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.537482023 CEST	443	53929	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.537619114 CEST	53929	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.537677050 CEST	443	53924	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.537823915 CEST	443	53924	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.537868977 CEST	53924	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.537877083 CEST	53929	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.537889004 CEST	443	53929	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.537966013 CEST	443	53925	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.537987947 CEST	53924	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.538003922 CEST	443	53924	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.538021088 CEST	53924	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.538027048 CEST	443	53924	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.538178921 CEST	443	53925	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.538227081 CEST	53925	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.538260937 CEST	53925	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.538271904 CEST	443	53925	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.538281918 CEST	53925	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.538286924 CEST	443	53925	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.540282011 CEST	53930	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.540313005 CEST	443	53930	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.540405989 CEST	53930	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.540503025 CEST	53930	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.540515900 CEST	443	53930	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.540566921 CEST	53931	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.540594101 CEST	443	53931	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.540709972 CEST	53931	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.540877104 CEST	53931	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.540884018 CEST	443	53931	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.603189945 CEST	443	53926	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.603283882 CEST	443	53926	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.603339911 CEST	53926	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.603562117 CEST	53926	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.603585958 CEST	443	53926	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.603599072 CEST	53926	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.603605032 CEST	443	53926	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.606731892 CEST	53932	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.606771946 CEST	443	53932	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:23.606857061 CEST	53932	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.607011080 CEST	53932	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:23.607026100 CEST	443	53932	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.292666912 CEST	443	53930	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.293320894 CEST	53930	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.293354034 CEST	443	53930	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.293857098 CEST	53930	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.293864012 CEST	443	53930	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.296516895 CEST	443	53928	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.297044039 CEST	53928	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.297061920 CEST	443	53928	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.297483921 CEST	53928	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.297492027 CEST	443	53928	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.300163984 CEST	443	53931	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.300612926 CEST	53931	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.300633907 CEST	443	53931	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.301071882 CEST	53931	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.301088095 CEST	443	53931	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.304471970 CEST	443	53929	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.304996967 CEST	53929	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.305025101 CEST	443	53929	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.305377960 CEST	53929	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.305383921 CEST	443	53929	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.361336946 CEST	443	53932	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.362005949 CEST	53932	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.362052917 CEST	443	53932	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.362510920 CEST	53932	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.362524986 CEST	443	53932	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.429457903 CEST	443	53930	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.429548979 CEST	443	53930	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.429620981 CEST	53930	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.429841995 CEST	53930	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.429867029 CEST	443	53930	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.429884911 CEST	53930	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.429893017 CEST	443	53930	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.433792114 CEST	53933	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.433828115 CEST	443	53933	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.433995962 CEST	53933	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.434111118 CEST	53933	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.434120893 CEST	443	53933	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.434773922 CEST	443	53928	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.434943914 CEST	443	53928	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.435009003 CEST	53928	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.435050964 CEST	53928	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.435069084 CEST	443	53928	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.435082912 CEST	53928	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.435090065 CEST	443	53928	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.437585115 CEST	53934	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.437622070 CEST	443	53934	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.437716007 CEST	53934	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.437866926 CEST	53934	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.437890053 CEST	443	53934	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.439348936 CEST	443	53931	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.439419031 CEST	443	53931	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.439476013 CEST	53931	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.439646959 CEST	53931	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.439646959 CEST	53931	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.439667940 CEST	443	53931	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.439678907 CEST	443	53931	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.442032099 CEST	53935	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.442064047 CEST	443	53935	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.442409992 CEST	53935	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.442500114 CEST	53935	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.442511082 CEST	443	53935	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.443011999 CEST	443	53929	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.443083048 CEST	443	53929	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.443137884 CEST	53929	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.443236113 CEST	53929	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.443243980 CEST	443	53929	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.443289995 CEST	53929	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.443296909 CEST	443	53929	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.445950985 CEST	53936	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.445977926 CEST	443	53936	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.446171999 CEST	53936	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.446171999 CEST	53936	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.446198940 CEST	443	53936	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.501096964 CEST	443	53932	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.503249884 CEST	443	53932	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.503323078 CEST	53932	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.503396034 CEST	53932	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.503411055 CEST	443	53932	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.507023096 CEST	53938	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.507066011 CEST	443	53938	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:24.507483959 CEST	53938	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.507833958 CEST	53938	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:24.507846117 CEST	443	53938	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.176167011 CEST	443	53933	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.177397013 CEST	53933	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.177424908 CEST	443	53933	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.178142071 CEST	53933	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.178162098 CEST	443	53933	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.191092968 CEST	443	53934	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.191836119 CEST	53934	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.191854000 CEST	443	53934	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.192678928 CEST	53934	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.192686081 CEST	443	53934	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.200278997 CEST	443	53935	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.201025963 CEST	53935	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.201040030 CEST	443	53935	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.202162027 CEST	443	53936	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.202267885 CEST	53935	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.202286005 CEST	443	53935	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.202964067 CEST	53936	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.202980042 CEST	443	53936	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.204199076 CEST	53936	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.204205036 CEST	443	53936	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.266578913 CEST	443	53938	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.267426014 CEST	53938	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.267442942 CEST	443	53938	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.268348932 CEST	53938	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.268363953 CEST	443	53938	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.310920954 CEST	443	53933	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.311012030 CEST	443	53933	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.311067104 CEST	53933	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.311455011 CEST	53933	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.311475039 CEST	443	53933	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.315632105 CEST	53939	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.315673113 CEST	443	53939	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.316165924 CEST	53939	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.316576958 CEST	53939	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.316590071 CEST	443	53939	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.328314066 CEST	443	53934	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.328418970 CEST	443	53934	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.328772068 CEST	53934	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.328881025 CEST	53934	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.328901052 CEST	443	53934	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.328911066 CEST	53934	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.328917980 CEST	443	53934	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.333800077 CEST	53940	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.333848953 CEST	443	53940	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.335537910 CEST	53940	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.335947990 CEST	53940	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.335964918 CEST	443	53940	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.337321997 CEST	443	53935	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.337524891 CEST	443	53935	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.337574005 CEST	53935	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.337677002 CEST	53935	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.337692976 CEST	443	53935	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.337707043 CEST	53935	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.337713003 CEST	443	53935	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.340162039 CEST	443	53936	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.340224981 CEST	443	53936	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.340326071 CEST	53936	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.341000080 CEST	53941	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.341027975 CEST	443	53941	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.341103077 CEST	53941	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.341161013 CEST	53936	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.341161013 CEST	53936	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.341175079 CEST	443	53936	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.341183901 CEST	443	53936	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.341375113 CEST	53941	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.341389894 CEST	443	53941	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.344655037 CEST	53942	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.344686985 CEST	443	53942	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.345314026 CEST	53942	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.345544100 CEST	53942	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.345560074 CEST	443	53942	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.403800964 CEST	443	53938	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.403898954 CEST	443	53938	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.403974056 CEST	53938	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.404689074 CEST	53938	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.404709101 CEST	443	53938	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.404752016 CEST	53938	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.404758930 CEST	443	53938	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.411293030 CEST	53943	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.411334991 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:25.411437035 CEST	53943	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.411940098 CEST	53943	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:25.411957026 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.114003897 CEST	443	53942	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.123627901 CEST	443	53940	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.124797106 CEST	443	53941	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.141869068 CEST	53942	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.141885996 CEST	443	53942	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.142915010 CEST	53942	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.142924070 CEST	443	53942	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.145375013 CEST	53940	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.145387888 CEST	443	53940	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.146155119 CEST	53940	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.146161079 CEST	443	53940	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.146673918 CEST	53941	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.146706104 CEST	443	53941	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.147129059 CEST	53941	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.147135973 CEST	443	53941	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.158183098 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.158827066 CEST	53943	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.158843994 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.159869909 CEST	53943	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.159876108 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.226231098 CEST	443	53939	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.227236032 CEST	53939	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.227255106 CEST	443	53939	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.228298903 CEST	53939	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.228311062 CEST	443	53939	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.273556948 CEST	443	53942	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.273581982 CEST	443	53942	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.273646116 CEST	443	53942	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.273660898 CEST	53942	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.273699045 CEST	53942	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.274185896 CEST	53942	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.274209976 CEST	443	53942	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.274223089 CEST	53942	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.274229050 CEST	443	53942	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.278901100 CEST	443	53940	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.278964043 CEST	443	53940	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.279227972 CEST	53944	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.279273033 CEST	443	53944	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.279284954 CEST	53940	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.279568911 CEST	53944	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.279638052 CEST	53940	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.279638052 CEST	53940	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.279645920 CEST	443	53940	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.279659033 CEST	443	53940	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.280097961 CEST	53944	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.280107021 CEST	443	53944	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.282715082 CEST	443	53941	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.282790899 CEST	443	53941	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.282840967 CEST	53941	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.283546925 CEST	53941	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.283567905 CEST	443	53941	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.283581018 CEST	53941	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.283590078 CEST	443	53941	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.287017107 CEST	53945	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.287056923 CEST	443	53945	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.287216902 CEST	53945	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.287606001 CEST	53945	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.287616968 CEST	443	53945	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.290198088 CEST	53946	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.290226936 CEST	443	53946	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.290431976 CEST	53946	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.290910959 CEST	53946	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.290919065 CEST	443	53946	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.293122053 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.293135881 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.293207884 CEST	53943	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.293220997 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.293267012 CEST	53943	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.293323994 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.293374062 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.293414116 CEST	53943	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.293679953 CEST	53943	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.293687105 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.293698072 CEST	53943	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.293701887 CEST	443	53943	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.299350977 CEST	53947	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.299386024 CEST	443	53947	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.299561024 CEST	53947	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.300122023 CEST	53947	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.300134897 CEST	443	53947	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.373845100 CEST	443	53939	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.373863935 CEST	443	53939	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.373948097 CEST	443	53939	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.374021053 CEST	53939	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.375282049 CEST	53939	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.375282049 CEST	53939	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.375402927 CEST	53939	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.375420094 CEST	443	53939	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.385107994 CEST	53948	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.385140896 CEST	443	53948	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:26.386353970 CEST	53948	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.386353970 CEST	53948	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:26.386379957 CEST	443	53948	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.030769110 CEST	443	53944	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.031949043 CEST	53944	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.031975985 CEST	443	53944	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.032676935 CEST	53944	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.032689095 CEST	443	53944	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.039645910 CEST	443	53946	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.041884899 CEST	53946	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.041904926 CEST	443	53946	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.042686939 CEST	53946	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.042699099 CEST	443	53946	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.043239117 CEST	443	53945	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.044291019 CEST	443	53947	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.044572115 CEST	53945	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.044593096 CEST	443	53945	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.045393944 CEST	53945	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.045398951 CEST	443	53945	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.066328049 CEST	53947	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.066361904 CEST	443	53947	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.067894936 CEST	53947	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.067902088 CEST	443	53947	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.142476082 CEST	443	53948	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.144579887 CEST	53948	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.144613028 CEST	443	53948	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.145292044 CEST	53948	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.145303965 CEST	443	53948	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.167371035 CEST	443	53944	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.167398930 CEST	443	53944	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.167484045 CEST	443	53944	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.167505980 CEST	53944	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.167532921 CEST	53944	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.167855978 CEST	53944	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.167855978 CEST	53944	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.167876959 CEST	443	53944	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.167889118 CEST	443	53944	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.171060085 CEST	53949	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.171108007 CEST	443	53949	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.171185017 CEST	53949	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.171333075 CEST	53949	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.171345949 CEST	443	53949	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.176716089 CEST	443	53946	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.176789045 CEST	443	53946	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.176862001 CEST	53946	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.177012920 CEST	53946	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.177031040 CEST	443	53946	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.177042961 CEST	53946	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.177051067 CEST	443	53946	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.179866076 CEST	53950	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.179909945 CEST	443	53950	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.180042028 CEST	53950	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.180238008 CEST	53950	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.180253029 CEST	443	53950	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.181833982 CEST	443	53945	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.181901932 CEST	443	53945	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.181982994 CEST	53945	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.182075977 CEST	53945	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.182095051 CEST	443	53945	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.182113886 CEST	53945	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.182120085 CEST	443	53945	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.184365034 CEST	53951	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.184386015 CEST	443	53951	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.184621096 CEST	53951	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.184621096 CEST	53951	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.184643984 CEST	443	53951	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.199732065 CEST	443	53947	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.199812889 CEST	443	53947	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.199887037 CEST	53947	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.200086117 CEST	53947	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.200109959 CEST	443	53947	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.200124979 CEST	53947	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.200130939 CEST	443	53947	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.202914000 CEST	53952	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.202955961 CEST	443	53952	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.203020096 CEST	53952	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.203197002 CEST	53952	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.203210115 CEST	443	53952	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.280698061 CEST	443	53948	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.280989885 CEST	443	53948	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.281086922 CEST	53948	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.281137943 CEST	53948	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.281137943 CEST	53948	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.281152010 CEST	443	53948	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.281162024 CEST	443	53948	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.284305096 CEST	53953	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.284324884 CEST	443	53953	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.284400940 CEST	53953	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.284590960 CEST	53953	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.284605026 CEST	443	53953	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.940582037 CEST	443	53949	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.941330910 CEST	443	53951	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.941406965 CEST	53949	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.941437006 CEST	443	53949	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.942346096 CEST	53949	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.942363024 CEST	443	53949	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.943053961 CEST	53951	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.943069935 CEST	443	53951	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.944338083 CEST	53951	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.944343090 CEST	443	53951	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.950814962 CEST	443	53950	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.951241970 CEST	53950	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.951267958 CEST	443	53950	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.951673985 CEST	53950	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.951680899 CEST	443	53950	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.955151081 CEST	443	53952	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.955919027 CEST	53952	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.955950975 CEST	443	53952	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:27.956912041 CEST	53952	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:27.956923962 CEST	443	53952	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.048892021 CEST	443	53953	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.049621105 CEST	53953	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.049648046 CEST	443	53953	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.050487041 CEST	53953	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.050503016 CEST	443	53953	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.078543901 CEST	443	53951	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.078624010 CEST	443	53949	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.078814983 CEST	443	53949	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.078824043 CEST	443	53951	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.078902960 CEST	53949	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.078938961 CEST	53951	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.079164982 CEST	53951	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.079186916 CEST	443	53951	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.079200029 CEST	53951	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.079205990 CEST	443	53951	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.082149982 CEST	53949	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.082161903 CEST	443	53949	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.088618040 CEST	53954	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.088649035 CEST	443	53954	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.088891029 CEST	53954	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.089421988 CEST	53955	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.089466095 CEST	443	53955	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.089551926 CEST	53955	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.089791059 CEST	53954	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.089804888 CEST	443	53954	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.090058088 CEST	53955	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.090080023 CEST	443	53955	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.092293024 CEST	443	53950	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.092349052 CEST	443	53950	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.093147039 CEST	53950	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.093178034 CEST	53950	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.093200922 CEST	443	53950	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.093215942 CEST	53950	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.093224049 CEST	443	53950	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.093677044 CEST	443	53952	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.093750954 CEST	443	53952	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.093858957 CEST	53952	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.094285011 CEST	53952	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.094295025 CEST	443	53952	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.094312906 CEST	53952	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.094317913 CEST	443	53952	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.098628998 CEST	53956	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.098670006 CEST	443	53956	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.098941088 CEST	53956	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.100596905 CEST	53957	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.100629091 CEST	443	53957	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.100778103 CEST	53957	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.100820065 CEST	53956	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.100833893 CEST	443	53956	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.101141930 CEST	53957	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.101152897 CEST	443	53957	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.187592983 CEST	443	53953	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.187999964 CEST	443	53953	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.188199043 CEST	53953	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.188869953 CEST	53953	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.188889027 CEST	443	53953	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.189100981 CEST	53953	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.189107895 CEST	443	53953	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.196149111 CEST	53958	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.196178913 CEST	443	53958	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.196268082 CEST	53958	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.196891069 CEST	53958	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.196906090 CEST	443	53958	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.876646996 CEST	53959	443	192.168.2.4	142.250.185.132
Oct 23, 2024 17:54:28.876667976 CEST	443	53959	142.250.185.132	192.168.2.4
Oct 23, 2024 17:54:28.876967907 CEST	53959	443	192.168.2.4	142.250.185.132
Oct 23, 2024 17:54:28.877527952 CEST	53959	443	192.168.2.4	142.250.185.132
Oct 23, 2024 17:54:28.877540112 CEST	443	53959	142.250.185.132	192.168.2.4
Oct 23, 2024 17:54:28.992922068 CEST	443	53954	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.993597984 CEST	53954	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.993663073 CEST	443	53954	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.994117975 CEST	53954	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.994126081 CEST	443	53954	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.995368004 CEST	443	53957	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.995821953 CEST	53957	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.995843887 CEST	443	53957	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.996300936 CEST	53957	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.996309042 CEST	443	53957	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.996774912 CEST	443	53955	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.996870041 CEST	443	53956	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.997284889 CEST	53955	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.997292042 CEST	443	53955	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.997427940 CEST	53956	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.997446060 CEST	443	53956	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.997744083 CEST	53955	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.997747898 CEST	443	53955	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.997864008 CEST	53956	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.997881889 CEST	443	53956	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.998269081 CEST	443	53958	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.998614073 CEST	53958	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.998631954 CEST	443	53958	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:28.998924971 CEST	53958	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:28.998929977 CEST	443	53958	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.129118919 CEST	443	53954	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.129273891 CEST	443	53954	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.129359961 CEST	53954	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.129579067 CEST	53954	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.129621983 CEST	443	53954	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.129638910 CEST	53954	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.129656076 CEST	443	53954	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.133096933 CEST	53960	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.133147955 CEST	443	53960	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.133241892 CEST	53960	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.133418083 CEST	53960	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.133435965 CEST	443	53960	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.134048939 CEST	443	53957	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.134217024 CEST	443	53957	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.134275913 CEST	53957	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.134371996 CEST	53957	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.134372950 CEST	53957	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.134392977 CEST	443	53957	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.134402990 CEST	443	53957	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.135246992 CEST	443	53955	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.135680914 CEST	443	53955	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.135732889 CEST	443	53955	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.135757923 CEST	53955	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.135776043 CEST	53955	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.135878086 CEST	53955	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.135890961 CEST	443	53955	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.135899067 CEST	53955	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.135904074 CEST	443	53955	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.136617899 CEST	443	53956	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.136658907 CEST	443	53956	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.136713028 CEST	443	53956	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.136743069 CEST	53956	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.136933088 CEST	53956	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.136933088 CEST	53956	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.137092113 CEST	53956	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.137108088 CEST	443	53956	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.138866901 CEST	53961	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.138912916 CEST	443	53961	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.139062881 CEST	53961	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.139338017 CEST	53961	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.139348030 CEST	443	53961	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.140511036 CEST	53963	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.140536070 CEST	443	53963	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.140562057 CEST	53962	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.140597105 CEST	443	53962	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.140700102 CEST	53963	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.140744925 CEST	53962	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.140822887 CEST	53963	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.140835047 CEST	443	53963	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.140932083 CEST	53962	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.140943050 CEST	443	53962	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.141031981 CEST	443	53958	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.141102076 CEST	443	53958	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.141242981 CEST	53958	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.141242981 CEST	53958	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.141765118 CEST	53958	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.141777992 CEST	443	53958	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.144244909 CEST	53964	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.144279003 CEST	443	53964	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.144387960 CEST	53964	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.144606113 CEST	53964	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.144618034 CEST	443	53964	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.716376066 CEST	443	53959	142.250.185.132	192.168.2.4
Oct 23, 2024 17:54:29.716731071 CEST	53959	443	192.168.2.4	142.250.185.132
Oct 23, 2024 17:54:29.716742992 CEST	443	53959	142.250.185.132	192.168.2.4
Oct 23, 2024 17:54:29.717096090 CEST	443	53959	142.250.185.132	192.168.2.4
Oct 23, 2024 17:54:29.717554092 CEST	53959	443	192.168.2.4	142.250.185.132
Oct 23, 2024 17:54:29.717613935 CEST	443	53959	142.250.185.132	192.168.2.4
Oct 23, 2024 17:54:29.769673109 CEST	53959	443	192.168.2.4	142.250.185.132
Oct 23, 2024 17:54:29.876646042 CEST	443	53960	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.877242088 CEST	53960	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.877264023 CEST	443	53960	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.877757072 CEST	53960	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.877763987 CEST	443	53960	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.899395943 CEST	443	53962	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.900154114 CEST	53962	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.900181055 CEST	443	53962	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.900660038 CEST	53962	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.900665998 CEST	443	53962	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.902947903 CEST	443	53963	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.903280973 CEST	443	53961	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.903331041 CEST	53963	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.903351068 CEST	443	53963	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.904087067 CEST	53963	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.904093027 CEST	443	53963	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.904341936 CEST	53961	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.904350042 CEST	443	53961	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.904917955 CEST	53961	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.904922962 CEST	443	53961	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.917319059 CEST	443	53964	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.920516968 CEST	53964	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.920535088 CEST	443	53964	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:29.921036005 CEST	53964	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:29.921042919 CEST	443	53964	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.016803980 CEST	443	53960	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.017005920 CEST	443	53960	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.017085075 CEST	53960	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.017283916 CEST	53960	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.017301083 CEST	443	53960	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.017312050 CEST	53960	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.017318964 CEST	443	53960	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.021187067 CEST	53965	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.021234035 CEST	443	53965	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.021661043 CEST	53965	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.021661043 CEST	53965	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.021692991 CEST	443	53965	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.042099953 CEST	443	53962	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.042126894 CEST	443	53962	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.042169094 CEST	443	53962	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.042182922 CEST	53962	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.042229891 CEST	53962	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.042460918 CEST	53962	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.042468071 CEST	443	53962	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.042486906 CEST	53962	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.042491913 CEST	443	53962	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.044586897 CEST	443	53961	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.044949055 CEST	443	53961	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.045003891 CEST	53961	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.045056105 CEST	53961	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.045073032 CEST	443	53961	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.045084000 CEST	53961	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.045099974 CEST	443	53961	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.045572042 CEST	53966	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.045605898 CEST	443	53966	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.045878887 CEST	53966	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.046108007 CEST	53966	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.046119928 CEST	443	53966	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.046963930 CEST	443	53963	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.047034025 CEST	443	53963	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.047193050 CEST	53963	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.047223091 CEST	53963	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.047230005 CEST	443	53963	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.047240019 CEST	53963	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.047244072 CEST	443	53963	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.047348022 CEST	53967	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.047374010 CEST	443	53967	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.047430038 CEST	53967	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.047615051 CEST	53967	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.047626019 CEST	443	53967	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.049117088 CEST	53968	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.049134016 CEST	443	53968	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.049196005 CEST	53968	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.049325943 CEST	53968	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.049338102 CEST	443	53968	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.056941986 CEST	443	53964	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.056998968 CEST	443	53964	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.057056904 CEST	53964	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.057184935 CEST	53964	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.057199001 CEST	443	53964	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.057213068 CEST	53964	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.057219028 CEST	443	53964	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.059268951 CEST	53969	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.059304953 CEST	443	53969	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.059372902 CEST	53969	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.059520960 CEST	53969	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.059536934 CEST	443	53969	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.787712097 CEST	443	53965	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.788315058 CEST	53965	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.788335085 CEST	443	53965	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.788836956 CEST	53965	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.788842916 CEST	443	53965	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.796554089 CEST	443	53966	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.797024965 CEST	53966	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.797043085 CEST	443	53966	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.797492027 CEST	53966	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.797497988 CEST	443	53966	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.804337025 CEST	443	53967	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.804773092 CEST	53967	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.804785967 CEST	443	53967	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.805187941 CEST	53967	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.805191994 CEST	443	53967	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.814686060 CEST	443	53968	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.815068960 CEST	53968	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.815082073 CEST	443	53968	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.815418959 CEST	53968	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.815429926 CEST	443	53968	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.819008112 CEST	443	53969	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.819432020 CEST	53969	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.819461107 CEST	443	53969	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.819792986 CEST	53969	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.819808960 CEST	443	53969	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.926592112 CEST	443	53965	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.926774979 CEST	443	53965	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.926852942 CEST	53965	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.928313017 CEST	53965	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.928327084 CEST	443	53965	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.928339005 CEST	53965	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.928344965 CEST	443	53965	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.931884050 CEST	53970	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.931921005 CEST	443	53970	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.932116032 CEST	53970	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.932430029 CEST	53970	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.932440042 CEST	443	53970	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.933574915 CEST	443	53966	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.933603048 CEST	443	53966	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.933646917 CEST	443	53966	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.933708906 CEST	53966	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.937309980 CEST	53966	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.937328100 CEST	443	53966	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.937334061 CEST	53966	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.937339067 CEST	443	53966	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.939985991 CEST	53971	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.940027952 CEST	443	53971	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.942378044 CEST	53971	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.942559004 CEST	53971	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.942578077 CEST	443	53971	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.943248034 CEST	443	53967	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.943304062 CEST	443	53967	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.943376064 CEST	53967	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.943511009 CEST	53967	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.943521023 CEST	443	53967	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.943543911 CEST	53967	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.943548918 CEST	443	53967	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.945813894 CEST	53972	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.945835114 CEST	443	53972	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.946031094 CEST	53972	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.946202993 CEST	53972	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.946213961 CEST	443	53972	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.951323986 CEST	443	53968	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.951356888 CEST	443	53968	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.951406956 CEST	443	53968	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.951472044 CEST	53968	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.951586962 CEST	53968	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.951602936 CEST	443	53968	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.951647043 CEST	53968	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.951652050 CEST	443	53968	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.954032898 CEST	53973	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.954058886 CEST	443	53973	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.954123020 CEST	53973	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.954252958 CEST	53973	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.954265118 CEST	443	53973	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.959264994 CEST	443	53969	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.959979057 CEST	443	53969	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.960150003 CEST	53969	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.960199118 CEST	53969	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.960199118 CEST	53969	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.960218906 CEST	443	53969	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.960225105 CEST	443	53969	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.962253094 CEST	53974	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.962286949 CEST	443	53974	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:30.962464094 CEST	53974	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.962611914 CEST	53974	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:30.962625027 CEST	443	53974	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.689024925 CEST	443	53971	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.689776897 CEST	53971	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.689788103 CEST	443	53971	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.690381050 CEST	53971	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.690387011 CEST	443	53971	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.695667028 CEST	443	53970	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.696235895 CEST	53970	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.696250916 CEST	443	53970	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.696738958 CEST	53970	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.696744919 CEST	443	53970	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.700552940 CEST	443	53972	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.701076984 CEST	53972	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.701092005 CEST	443	53972	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.701829910 CEST	53972	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.701838017 CEST	443	53972	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.707628965 CEST	443	53973	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.708180904 CEST	53973	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.708194017 CEST	443	53973	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.708739996 CEST	53973	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.708745003 CEST	443	53973	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.732832909 CEST	443	53974	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.733485937 CEST	53974	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.733500004 CEST	443	53974	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.733906984 CEST	53974	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.733911991 CEST	443	53974	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.825683117 CEST	443	53971	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.825777054 CEST	443	53971	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.825934887 CEST	53971	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.826145887 CEST	53971	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.826169014 CEST	443	53971	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.826180935 CEST	53971	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.826186895 CEST	443	53971	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.829627037 CEST	53975	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.829677105 CEST	443	53975	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.829773903 CEST	53975	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.830154896 CEST	53975	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.830183029 CEST	443	53975	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.852490902 CEST	443	53972	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.852521896 CEST	443	53972	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.852583885 CEST	443	53972	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.852610111 CEST	53972	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.852641106 CEST	53972	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.852983952 CEST	53972	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.852983952 CEST	53972	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.853005886 CEST	443	53972	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.853027105 CEST	443	53972	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.853610992 CEST	443	53970	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.853693008 CEST	443	53970	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.853782892 CEST	53970	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.853843927 CEST	53970	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.853862047 CEST	443	53970	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.853873968 CEST	53970	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.853880882 CEST	443	53970	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.856935978 CEST	53976	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.856977940 CEST	443	53976	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.857101917 CEST	53977	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.857137918 CEST	443	53977	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.857141972 CEST	53976	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.857199907 CEST	53977	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.857345104 CEST	53976	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.857359886 CEST	443	53976	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.857450008 CEST	53977	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.857465029 CEST	443	53977	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.864974022 CEST	443	53973	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.865263939 CEST	443	53973	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.865394115 CEST	53973	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.865473986 CEST	53973	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.865473986 CEST	53973	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.865489960 CEST	443	53973	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.865502119 CEST	443	53973	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.868977070 CEST	53978	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.869009972 CEST	443	53978	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.869088888 CEST	53978	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.869281054 CEST	53978	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.869292974 CEST	443	53978	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.870220900 CEST	443	53974	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.870302916 CEST	443	53974	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.870461941 CEST	53974	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.870532990 CEST	53974	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.870532990 CEST	53974	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.870554924 CEST	443	53974	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.870564938 CEST	443	53974	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.873724937 CEST	53979	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.873752117 CEST	443	53979	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:31.873888969 CEST	53979	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.874068975 CEST	53979	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:31.874083996 CEST	443	53979	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.609397888 CEST	443	53975	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.609728098 CEST	443	53977	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.611347914 CEST	53977	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.611362934 CEST	443	53977	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.611509085 CEST	443	53976	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.612438917 CEST	53977	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.612443924 CEST	443	53977	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.612775087 CEST	53975	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.612797976 CEST	443	53975	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.617002964 CEST	53975	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.617012978 CEST	443	53975	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.618547916 CEST	53976	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.618575096 CEST	443	53976	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.619304895 CEST	53976	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.619318962 CEST	443	53976	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.621051073 CEST	443	53978	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.621851921 CEST	53978	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.621859074 CEST	443	53978	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.622651100 CEST	53978	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.622656107 CEST	443	53978	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.632498980 CEST	443	53979	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.665369987 CEST	53979	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.665399075 CEST	443	53979	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.665889978 CEST	53979	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.665894985 CEST	443	53979	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.745496988 CEST	443	53977	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.745547056 CEST	443	53977	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.745593071 CEST	443	53977	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.745654106 CEST	53977	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.746081114 CEST	53977	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.746100903 CEST	443	53977	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.750175953 CEST	443	53976	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.750245094 CEST	443	53976	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.750308037 CEST	53976	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.750994921 CEST	443	53975	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.751079082 CEST	443	53975	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.751190901 CEST	53975	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.751580954 CEST	53980	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.751617908 CEST	443	53980	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.751786947 CEST	53976	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.751800060 CEST	443	53976	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.751872063 CEST	53980	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.756453037 CEST	53975	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.756462097 CEST	443	53975	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.756503105 CEST	53975	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.756509066 CEST	443	53975	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.757873058 CEST	53980	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.757884026 CEST	443	53980	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.758410931 CEST	443	53978	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.758522987 CEST	443	53978	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.758577108 CEST	53978	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.758634090 CEST	53978	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.758644104 CEST	443	53978	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.758676052 CEST	53978	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.758681059 CEST	443	53978	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.759550095 CEST	53981	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.759582043 CEST	443	53981	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.759684086 CEST	53981	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.760062933 CEST	53981	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.760073900 CEST	443	53981	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.770643950 CEST	53982	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.770665884 CEST	443	53982	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.770895004 CEST	53982	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.772926092 CEST	53983	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.772968054 CEST	443	53983	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.773034096 CEST	53983	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.773395061 CEST	53982	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.773402929 CEST	443	53982	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.773953915 CEST	53983	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.773984909 CEST	443	53983	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.800142050 CEST	443	53979	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.800266027 CEST	443	53979	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.800334930 CEST	53979	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.801088095 CEST	53979	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.801110029 CEST	443	53979	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.801125050 CEST	53979	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.801131964 CEST	443	53979	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.806741953 CEST	53984	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.806783915 CEST	443	53984	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:32.806963921 CEST	53984	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.807197094 CEST	53984	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:32.807208061 CEST	443	53984	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.513906002 CEST	443	53980	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.514780045 CEST	53980	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.514799118 CEST	443	53980	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.516077995 CEST	53980	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.516083002 CEST	443	53980	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.521209955 CEST	443	53983	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.522384882 CEST	53983	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.522414923 CEST	443	53983	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.523602962 CEST	53983	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.523626089 CEST	443	53983	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.527715921 CEST	443	53981	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.528508902 CEST	53981	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.528525114 CEST	443	53981	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.529153109 CEST	53981	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.529160976 CEST	443	53981	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.535355091 CEST	443	53982	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.536232948 CEST	53982	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.536251068 CEST	443	53982	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.537452936 CEST	53982	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.537460089 CEST	443	53982	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.550311089 CEST	443	53984	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.551868916 CEST	53984	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.551882982 CEST	443	53984	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.555490017 CEST	53984	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.555497885 CEST	443	53984	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.655512094 CEST	443	53980	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.655750036 CEST	443	53980	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.655797958 CEST	443	53980	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.655831099 CEST	53980	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.655905008 CEST	53980	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.656116009 CEST	53980	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.656116962 CEST	53980	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.656131983 CEST	443	53980	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.656143904 CEST	443	53980	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.658868074 CEST	443	53983	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.659081936 CEST	443	53983	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.659132004 CEST	53983	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.659845114 CEST	53983	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.659871101 CEST	53983	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.659872055 CEST	443	53983	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.659878969 CEST	443	53983	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.672223091 CEST	443	53981	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.675035954 CEST	443	53981	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.675065994 CEST	443	53982	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.675137043 CEST	443	53982	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.675167084 CEST	53981	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.675206900 CEST	53982	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.676932096 CEST	53982	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.676932096 CEST	53982	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.676949978 CEST	443	53982	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.676960945 CEST	443	53982	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.684339046 CEST	53981	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.684351921 CEST	443	53981	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.686911106 CEST	53985	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.686964989 CEST	443	53985	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.687046051 CEST	53985	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.688714027 CEST	443	53984	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.688740969 CEST	443	53984	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.688801050 CEST	443	53984	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.688828945 CEST	53984	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.688857079 CEST	53984	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.689538956 CEST	53985	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.689554930 CEST	443	53985	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.691054106 CEST	53986	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.691107035 CEST	443	53986	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.691167116 CEST	53986	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.691330910 CEST	53986	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.691346884 CEST	443	53986	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.693582058 CEST	53984	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.693615913 CEST	443	53984	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.693631887 CEST	53984	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.693639994 CEST	443	53984	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.697664976 CEST	53987	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.697685003 CEST	443	53987	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.697845936 CEST	53987	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.705566883 CEST	53988	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.705604076 CEST	53989	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.705622911 CEST	443	53988	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.705640078 CEST	443	53989	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.705722094 CEST	53987	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.705754042 CEST	443	53987	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.705780983 CEST	53989	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.705806971 CEST	53988	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.706228971 CEST	53988	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.706257105 CEST	443	53988	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:33.706362963 CEST	53989	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:33.706373930 CEST	443	53989	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.448585033 CEST	443	53986	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.449963093 CEST	53986	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.450020075 CEST	443	53986	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.450696945 CEST	53986	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.450700998 CEST	443	53986	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.451600075 CEST	443	53985	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.452162027 CEST	53985	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.452189922 CEST	443	53985	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.452949047 CEST	53985	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.452960014 CEST	443	53985	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.463568926 CEST	443	53989	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.464788914 CEST	53989	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.464809895 CEST	443	53989	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.465667009 CEST	53989	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.465677023 CEST	443	53989	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.480622053 CEST	443	53988	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.481723070 CEST	53988	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.481739998 CEST	443	53988	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.482937098 CEST	53988	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.482953072 CEST	443	53988	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.483239889 CEST	443	53987	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.483752966 CEST	53987	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.483776093 CEST	443	53987	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.484525919 CEST	53987	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.484536886 CEST	443	53987	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.608551979 CEST	443	53986	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.608592987 CEST	443	53986	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.608649969 CEST	443	53986	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.608649969 CEST	53986	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.608727932 CEST	53986	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.609083891 CEST	53986	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.609113932 CEST	443	53986	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.609128952 CEST	53986	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.609138966 CEST	443	53986	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.609236956 CEST	443	53985	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.609318018 CEST	443	53985	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.609896898 CEST	53985	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.610105991 CEST	443	53989	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.610169888 CEST	443	53989	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.610224009 CEST	53989	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.611083031 CEST	53989	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.611113071 CEST	443	53989	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.611124992 CEST	53989	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.611131907 CEST	443	53989	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.613799095 CEST	53985	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.613823891 CEST	443	53985	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.613838911 CEST	53985	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.613845110 CEST	443	53985	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.619214058 CEST	53990	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.619265079 CEST	443	53990	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.619405031 CEST	53990	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.620985031 CEST	443	53987	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.621212006 CEST	443	53987	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.621267080 CEST	53987	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.621964931 CEST	443	53988	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.621995926 CEST	53991	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.622000933 CEST	443	53988	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.622029066 CEST	443	53991	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.622047901 CEST	443	53988	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.622088909 CEST	53991	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.622122049 CEST	53988	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.622122049 CEST	53988	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.623965025 CEST	53992	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.623996973 CEST	443	53992	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.624058008 CEST	53992	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.624800920 CEST	53992	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.624820948 CEST	443	53992	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.625039101 CEST	53991	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.625061035 CEST	443	53991	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.625300884 CEST	53990	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.625320911 CEST	443	53990	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.625610113 CEST	53987	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.625633955 CEST	443	53987	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.625647068 CEST	53987	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.625653028 CEST	443	53987	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.629936934 CEST	53993	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.629990101 CEST	443	53993	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.630059958 CEST	53993	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.630942106 CEST	53993	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.630960941 CEST	443	53993	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.631411076 CEST	53988	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.631411076 CEST	53988	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.631443024 CEST	443	53988	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.631457090 CEST	443	53988	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.635204077 CEST	53994	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.635246038 CEST	443	53994	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:34.635478973 CEST	53994	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.635745049 CEST	53994	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:34.635766029 CEST	443	53994	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.365978956 CEST	443	53992	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.366817951 CEST	53992	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.366837978 CEST	443	53992	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.367947102 CEST	53992	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.367964029 CEST	443	53992	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.372483015 CEST	443	53990	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.373070002 CEST	53990	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.373085976 CEST	443	53990	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.373462915 CEST	53990	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.373475075 CEST	443	53990	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.374968052 CEST	443	53991	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.375319004 CEST	53991	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.375332117 CEST	443	53991	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.375706911 CEST	53991	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.375711918 CEST	443	53991	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.388072014 CEST	443	53994	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.388590097 CEST	53994	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.388598919 CEST	443	53994	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.389000893 CEST	53994	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.389008045 CEST	443	53994	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.395745993 CEST	443	53993	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.396536112 CEST	53993	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.396564007 CEST	443	53993	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.397433996 CEST	53993	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.397445917 CEST	443	53993	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.501238108 CEST	443	53992	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.501271009 CEST	443	53992	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.501336098 CEST	443	53992	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.501342058 CEST	53992	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.501395941 CEST	53992	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.501650095 CEST	53992	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.501650095 CEST	53992	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.501667976 CEST	443	53992	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.501677036 CEST	443	53992	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.505090952 CEST	53995	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.505141020 CEST	443	53995	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.505220890 CEST	53995	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.505647898 CEST	53995	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.505665064 CEST	443	53995	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.507967949 CEST	443	53990	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.508016109 CEST	443	53990	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.508069038 CEST	443	53990	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.508069992 CEST	53990	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.508107901 CEST	53990	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.508332014 CEST	53990	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.508354902 CEST	443	53990	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.508367062 CEST	53990	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.508373976 CEST	443	53990	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.511367083 CEST	53996	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.511404037 CEST	443	53996	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.511477947 CEST	53996	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.511639118 CEST	53996	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.511653900 CEST	443	53996	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.512176991 CEST	443	53991	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.512248039 CEST	443	53991	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.512316942 CEST	53991	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.512404919 CEST	53991	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.512404919 CEST	53991	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.512424946 CEST	443	53991	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.512435913 CEST	443	53991	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.514784098 CEST	53997	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.514818907 CEST	443	53997	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.514972925 CEST	53997	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.515126944 CEST	53997	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.515162945 CEST	443	53997	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.526278973 CEST	443	53994	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.526341915 CEST	443	53994	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.526473045 CEST	53994	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.526705980 CEST	53994	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.526705980 CEST	53994	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.526724100 CEST	443	53994	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.526734114 CEST	443	53994	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.529750109 CEST	53998	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.529782057 CEST	443	53998	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.529891014 CEST	53998	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.530041933 CEST	53998	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.530056000 CEST	443	53998	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.533890009 CEST	443	53993	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.533963919 CEST	443	53993	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.534013033 CEST	53993	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.534125090 CEST	53993	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.534142971 CEST	443	53993	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.534148932 CEST	53993	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.534154892 CEST	443	53993	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.536851883 CEST	53999	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.536887884 CEST	443	53999	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:35.536952972 CEST	53999	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.537128925 CEST	53999	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:35.537149906 CEST	443	53999	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.255893946 CEST	443	53997	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.256529093 CEST	443	53995	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.256710052 CEST	53997	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.256735086 CEST	443	53997	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.257839918 CEST	53997	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.257847071 CEST	443	53997	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.258346081 CEST	443	53996	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.258511066 CEST	53995	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.258536100 CEST	443	53995	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.259140968 CEST	53995	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.259145975 CEST	443	53995	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.259552002 CEST	53996	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.259572983 CEST	443	53996	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.260132074 CEST	53996	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.260142088 CEST	443	53996	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.275993109 CEST	443	53998	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.277116060 CEST	53998	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.277148962 CEST	443	53998	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.277873993 CEST	53998	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.277880907 CEST	443	53998	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.300981998 CEST	443	53999	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.301692009 CEST	53999	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.301723003 CEST	443	53999	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.303029060 CEST	53999	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.303044081 CEST	443	53999	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.389447927 CEST	443	53997	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.389544010 CEST	443	53997	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.389652014 CEST	53997	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.390041113 CEST	53997	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.390054941 CEST	443	53997	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.390069962 CEST	53997	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.390075922 CEST	443	53997	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.393109083 CEST	443	53995	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.393178940 CEST	443	53995	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.393241882 CEST	53995	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.393644094 CEST	443	53996	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.393824100 CEST	443	53996	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.393861055 CEST	443	53996	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.393915892 CEST	53996	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.393915892 CEST	53996	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.394134998 CEST	54000	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.394160986 CEST	443	54000	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.394320011 CEST	53995	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.394329071 CEST	443	53995	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.394335985 CEST	53995	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.394341946 CEST	443	53995	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.394355059 CEST	54000	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.395747900 CEST	54000	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.395760059 CEST	443	54000	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.396950960 CEST	53996	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.396965027 CEST	443	53996	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.402252913 CEST	54001	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.402280092 CEST	443	54001	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.402641058 CEST	54001	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.404074907 CEST	54002	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.404083967 CEST	443	54002	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.404197931 CEST	54002	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.405025959 CEST	54001	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.405039072 CEST	443	54001	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.405549049 CEST	54002	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.405564070 CEST	443	54002	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.411910057 CEST	443	53998	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.411956072 CEST	443	53998	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.412000895 CEST	443	53998	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.412022114 CEST	53998	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.412069082 CEST	53998	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.437282085 CEST	53998	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.437298059 CEST	443	53998	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.437468052 CEST	53998	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.437474012 CEST	443	53998	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.439450026 CEST	443	53999	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.439513922 CEST	443	53999	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.440614939 CEST	53999	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.440912962 CEST	53999	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.440932035 CEST	443	53999	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.440963984 CEST	53999	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.440970898 CEST	443	53999	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.454724073 CEST	54003	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.454750061 CEST	443	54003	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.454844952 CEST	54003	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.455059052 CEST	54003	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.455069065 CEST	443	54003	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.456043005 CEST	54004	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.456063032 CEST	443	54004	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:36.456305027 CEST	54004	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.456934929 CEST	54004	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:36.456945896 CEST	443	54004	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.191776991 CEST	443	54000	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.192107916 CEST	443	54001	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.192488909 CEST	54000	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.192507029 CEST	443	54000	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.192569971 CEST	54001	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.192579985 CEST	443	54001	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.192624092 CEST	443	54002	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.193362951 CEST	54000	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.193371058 CEST	443	54000	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.193516970 CEST	54001	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.193521976 CEST	443	54001	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.193952084 CEST	54002	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.193959951 CEST	443	54002	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.194391966 CEST	54002	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.194397926 CEST	443	54002	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.209383011 CEST	443	54003	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.209809065 CEST	54003	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.209816933 CEST	443	54003	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.210290909 CEST	54003	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.210295916 CEST	443	54003	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.211860895 CEST	443	54004	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.212270021 CEST	54004	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.212284088 CEST	443	54004	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.212691069 CEST	54004	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.212696075 CEST	443	54004	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.332447052 CEST	443	54001	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.332454920 CEST	443	54000	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.332520008 CEST	443	54001	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.332534075 CEST	443	54000	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.332575083 CEST	54001	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.332592964 CEST	54000	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.332659960 CEST	443	54002	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.332684994 CEST	443	54002	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.332725048 CEST	443	54002	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.332741022 CEST	54002	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.332782984 CEST	54002	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.333003998 CEST	54001	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.333014965 CEST	443	54001	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.333026886 CEST	54001	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.333031893 CEST	443	54001	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.335719109 CEST	54000	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.335731030 CEST	443	54000	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.335794926 CEST	54000	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.335799932 CEST	443	54000	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.338113070 CEST	54002	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.338125944 CEST	443	54002	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.338176966 CEST	54002	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.338181973 CEST	443	54002	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.342581034 CEST	54005	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.342619896 CEST	443	54005	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.342870951 CEST	54005	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.343532085 CEST	54005	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.343545914 CEST	443	54005	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.346257925 CEST	54006	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.346293926 CEST	443	54006	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.346368074 CEST	54006	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.346568108 CEST	443	54003	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.346621037 CEST	54006	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.346627951 CEST	443	54003	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.346631050 CEST	443	54006	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.346692085 CEST	443	54003	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.346733093 CEST	54003	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.346733093 CEST	54003	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.348464966 CEST	443	54004	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.348536968 CEST	443	54004	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.348893881 CEST	54004	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.348938942 CEST	54007	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.348959923 CEST	443	54007	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.349140882 CEST	54003	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.349140882 CEST	54007	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.349148035 CEST	443	54003	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.351516008 CEST	54007	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.351527929 CEST	443	54007	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.352063894 CEST	54004	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.352063894 CEST	54004	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.352087021 CEST	443	54004	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.352097988 CEST	443	54004	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.355191946 CEST	54008	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.355209112 CEST	443	54008	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.355341911 CEST	54008	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.356545925 CEST	54008	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.356559992 CEST	443	54008	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.356909037 CEST	54009	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.356940985 CEST	443	54009	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:37.357002974 CEST	54009	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.357150078 CEST	54009	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:37.357165098 CEST	443	54009	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.105012894 CEST	443	54007	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.105719090 CEST	54007	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.105735064 CEST	443	54007	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.106223106 CEST	54007	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.106229067 CEST	443	54007	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.107656002 CEST	443	54006	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.108067036 CEST	54006	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.108093023 CEST	443	54006	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.108571053 CEST	54006	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.108578920 CEST	443	54006	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.115020990 CEST	443	54009	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.115092039 CEST	443	54008	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.115473032 CEST	54009	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.115495920 CEST	443	54009	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.116034985 CEST	54009	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.116043091 CEST	443	54009	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.118330002 CEST	54008	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.118347883 CEST	443	54008	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.118769884 CEST	54008	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.118776083 CEST	443	54008	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.122538090 CEST	443	54005	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.122870922 CEST	54005	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.122896910 CEST	443	54005	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.123342037 CEST	54005	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.123354912 CEST	443	54005	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.239847898 CEST	443	54007	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.239928961 CEST	443	54007	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.240021944 CEST	54007	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.240395069 CEST	54007	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.240407944 CEST	443	54007	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.240459919 CEST	54007	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.240467072 CEST	443	54007	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.243046999 CEST	443	54006	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.243144035 CEST	443	54006	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.243362904 CEST	54006	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.243577957 CEST	54006	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.243577957 CEST	54006	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.243607044 CEST	443	54006	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.243618965 CEST	443	54006	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.244293928 CEST	54010	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.244340897 CEST	443	54010	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.244421959 CEST	54010	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.244708061 CEST	54010	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.244720936 CEST	443	54010	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.245937109 CEST	54011	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.245975018 CEST	443	54011	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.246052980 CEST	54011	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.246229887 CEST	54011	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.246246099 CEST	443	54011	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.251821041 CEST	443	54008	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.251830101 CEST	443	54009	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.251918077 CEST	443	54008	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.251938105 CEST	443	54009	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.252007961 CEST	54009	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.252098083 CEST	54008	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.252144098 CEST	54008	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.252156019 CEST	443	54008	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.252166986 CEST	54008	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.252171993 CEST	443	54008	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.252204895 CEST	54009	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.252216101 CEST	443	54009	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.254458904 CEST	54012	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.254489899 CEST	443	54012	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.254741907 CEST	54013	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.254775047 CEST	54012	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.254795074 CEST	443	54013	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.254892111 CEST	54013	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.254920959 CEST	54012	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.254930973 CEST	443	54012	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.255032063 CEST	54013	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.255052090 CEST	443	54013	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.262528896 CEST	443	54005	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.262583017 CEST	443	54005	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.262644053 CEST	54005	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.262778044 CEST	54005	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.262789011 CEST	443	54005	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.262844086 CEST	54005	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.262851000 CEST	443	54005	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.265310049 CEST	54014	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.265342951 CEST	443	54014	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.265429974 CEST	54014	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.265691042 CEST	54014	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.265702963 CEST	443	54014	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.997323036 CEST	443	54010	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.997971058 CEST	54010	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.997982025 CEST	443	54010	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:38.998502016 CEST	54010	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:38.998507023 CEST	443	54010	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.006954908 CEST	443	54012	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.007719040 CEST	54012	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.007742882 CEST	443	54012	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.008363962 CEST	54012	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.008383989 CEST	443	54012	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.016309023 CEST	443	54013	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.016644001 CEST	443	54011	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.016760111 CEST	54013	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.016777039 CEST	443	54013	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.016927004 CEST	54011	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.016944885 CEST	443	54011	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.017271996 CEST	54013	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.017276049 CEST	443	54013	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.017437935 CEST	54011	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.017442942 CEST	443	54011	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.022073030 CEST	443	54014	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.022569895 CEST	54014	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.022598982 CEST	443	54014	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.022855043 CEST	54014	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.022861958 CEST	443	54014	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.133255005 CEST	443	54010	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.133317947 CEST	443	54010	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.133388042 CEST	54010	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.133667946 CEST	54010	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.133687973 CEST	443	54010	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.133699894 CEST	54010	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.133706093 CEST	443	54010	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.136996031 CEST	54015	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.137032032 CEST	443	54015	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.137177944 CEST	54015	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.137310982 CEST	54015	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.137330055 CEST	443	54015	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.144005060 CEST	443	54012	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.144077063 CEST	443	54012	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.144263029 CEST	54012	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.144263029 CEST	54012	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.144288063 CEST	54012	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.144304991 CEST	443	54012	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.147032976 CEST	54016	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.147064924 CEST	443	54016	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.147169113 CEST	54016	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.147325039 CEST	54016	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.147336960 CEST	443	54016	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.154232979 CEST	443	54013	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.154382944 CEST	443	54013	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.154443979 CEST	443	54013	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.154625893 CEST	54013	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.154814959 CEST	54013	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.154815912 CEST	54013	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.154830933 CEST	443	54013	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.154835939 CEST	443	54013	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.155499935 CEST	443	54011	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.155668974 CEST	443	54011	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.155723095 CEST	54011	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.155766010 CEST	54011	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.155766010 CEST	54011	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.155785084 CEST	443	54011	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.155792952 CEST	443	54011	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.157634974 CEST	54017	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.157661915 CEST	443	54017	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.157713890 CEST	54018	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.157725096 CEST	443	54018	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.157788038 CEST	54018	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.157887936 CEST	54017	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.157980919 CEST	54018	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.157993078 CEST	443	54018	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.158013105 CEST	54017	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.158030987 CEST	443	54017	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.161362886 CEST	443	54014	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.161679029 CEST	443	54014	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.161834002 CEST	54014	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.161905050 CEST	54014	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.161905050 CEST	54014	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.161916971 CEST	443	54014	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.161926985 CEST	443	54014	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.164299965 CEST	54019	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.164328098 CEST	443	54019	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.164427042 CEST	54019	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.164549112 CEST	54019	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.164562941 CEST	443	54019	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.711247921 CEST	443	53959	142.250.185.132	192.168.2.4
Oct 23, 2024 17:54:39.711321115 CEST	443	53959	142.250.185.132	192.168.2.4
Oct 23, 2024 17:54:39.711505890 CEST	53959	443	192.168.2.4	142.250.185.132
Oct 23, 2024 17:54:39.885715008 CEST	443	54015	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.886421919 CEST	54015	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.886436939 CEST	443	54015	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.887064934 CEST	54015	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.887073994 CEST	443	54015	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.905611038 CEST	443	54016	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.906315088 CEST	54016	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.906351089 CEST	443	54016	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.906949043 CEST	54016	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.906958103 CEST	443	54016	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.908627033 CEST	443	54018	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.909277916 CEST	54018	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.909298897 CEST	443	54018	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.909853935 CEST	54018	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.909866095 CEST	443	54018	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.912607908 CEST	443	54017	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.913038969 CEST	54017	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.913048983 CEST	443	54017	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.913573027 CEST	54017	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.913578987 CEST	443	54017	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.924263954 CEST	443	54019	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.924802065 CEST	54019	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.924812078 CEST	443	54019	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:39.925421953 CEST	54019	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:39.925426960 CEST	443	54019	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.021833897 CEST	443	54015	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.021923065 CEST	443	54015	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.022116899 CEST	54015	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.022298098 CEST	54015	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.022320986 CEST	443	54015	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.022332907 CEST	54015	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.022341013 CEST	443	54015	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.026369095 CEST	54020	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.026417971 CEST	443	54020	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.026520014 CEST	54020	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.026752949 CEST	54020	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.026772976 CEST	443	54020	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.044153929 CEST	443	54018	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.044245958 CEST	443	54018	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.044302940 CEST	443	54018	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.044315100 CEST	54018	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.044429064 CEST	54018	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.044672966 CEST	54018	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.044698000 CEST	443	54018	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.044711113 CEST	54018	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.044718981 CEST	443	54018	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.045536041 CEST	443	54016	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.045547009 CEST	443	54016	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.045592070 CEST	443	54016	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.045603991 CEST	54016	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.045640945 CEST	54016	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.045866966 CEST	54016	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.045876980 CEST	443	54016	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.045919895 CEST	54016	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.045924902 CEST	443	54016	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.048197985 CEST	54021	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.048223972 CEST	443	54021	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.048242092 CEST	54022	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.048283100 CEST	443	54022	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.048330069 CEST	54021	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.048485994 CEST	54022	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.048516035 CEST	54021	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.048527002 CEST	443	54021	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.048605919 CEST	54022	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.048620939 CEST	443	54022	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.049467087 CEST	443	54017	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.049616098 CEST	443	54017	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.049657106 CEST	443	54017	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.049680948 CEST	54017	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.049717903 CEST	54017	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.049829960 CEST	54017	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.049843073 CEST	443	54017	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.049854994 CEST	54017	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.049860001 CEST	443	54017	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.052529097 CEST	54023	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.052552938 CEST	443	54023	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.052897930 CEST	54023	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.052898884 CEST	54023	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.052954912 CEST	443	54023	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.063005924 CEST	443	54019	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.063076019 CEST	443	54019	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.063128948 CEST	54019	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.063376904 CEST	54019	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.063390970 CEST	443	54019	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.063400030 CEST	54019	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.063405037 CEST	443	54019	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.066627026 CEST	54024	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.066678047 CEST	443	54024	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.066931963 CEST	54024	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.067080975 CEST	54024	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.067094088 CEST	443	54024	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.790385008 CEST	443	54022	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.794034958 CEST	443	54023	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.794855118 CEST	443	54020	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.796175003 CEST	54022	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.796194077 CEST	443	54022	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.797281027 CEST	54022	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.797288895 CEST	443	54022	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.797447920 CEST	54023	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.797458887 CEST	443	54023	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.798419952 CEST	54023	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.798427105 CEST	443	54023	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.799300909 CEST	54020	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.799308062 CEST	443	54020	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.799499989 CEST	443	54021	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.799876928 CEST	54020	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.799881935 CEST	443	54020	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.800353050 CEST	54021	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.800360918 CEST	443	54021	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.800992966 CEST	54021	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.800997972 CEST	443	54021	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.830048084 CEST	443	54024	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.830566883 CEST	54024	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.830591917 CEST	443	54024	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.831517935 CEST	54024	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.831525087 CEST	443	54024	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.927462101 CEST	443	54022	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.927715063 CEST	443	54022	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.927798033 CEST	54022	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.928343058 CEST	443	54023	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.928359032 CEST	443	54023	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.928394079 CEST	443	54023	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.928400993 CEST	54023	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.928453922 CEST	54023	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.930222034 CEST	54022	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.930237055 CEST	443	54022	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.930247068 CEST	54022	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.930253029 CEST	443	54022	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.930789948 CEST	54023	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.930800915 CEST	443	54023	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.930844069 CEST	54023	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.930851936 CEST	443	54023	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.936222076 CEST	443	54020	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.936337948 CEST	443	54020	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.936383009 CEST	443	54020	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.936434031 CEST	54020	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.937047958 CEST	443	54021	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.937071085 CEST	443	54021	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.937129974 CEST	443	54021	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.937182903 CEST	54021	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.941148996 CEST	54021	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.941148996 CEST	54021	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.941148996 CEST	54021	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.943797112 CEST	54020	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.943803072 CEST	443	54020	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.949573994 CEST	54025	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.949618101 CEST	443	54025	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.949707031 CEST	54025	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.951498032 CEST	54026	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.951530933 CEST	443	54026	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.951618910 CEST	54026	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.951889038 CEST	54025	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.951910019 CEST	443	54025	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.953934908 CEST	54027	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.953955889 CEST	443	54027	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.954073906 CEST	54027	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.954193115 CEST	54027	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.954204082 CEST	443	54027	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.954524040 CEST	54026	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.954554081 CEST	443	54026	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.956533909 CEST	54028	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.956557035 CEST	443	54028	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.956693888 CEST	54028	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.956988096 CEST	54028	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.957001925 CEST	443	54028	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.968136072 CEST	443	54024	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.968261003 CEST	443	54024	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.968306065 CEST	443	54024	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.968363047 CEST	54024	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.968450069 CEST	54024	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.968466043 CEST	443	54024	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.972608089 CEST	54029	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.972637892 CEST	443	54029	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:40.972943068 CEST	54029	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.973081112 CEST	54029	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:40.973094940 CEST	443	54029	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.009413958 CEST	53959	443	192.168.2.4	142.250.185.132
Oct 23, 2024 17:54:41.009433985 CEST	443	53959	142.250.185.132	192.168.2.4
Oct 23, 2024 17:54:41.162122011 CEST	54021	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:41.162142038 CEST	443	54021	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.975178003 CEST	443	54025	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.975189924 CEST	443	54028	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.976166964 CEST	443	54026	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.976264000 CEST	443	54027	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.976535082 CEST	54025	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:41.976552010 CEST	443	54025	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.977617979 CEST	54025	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:41.977624893 CEST	443	54025	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.978334904 CEST	54027	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:41.978342056 CEST	443	54027	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.979329109 CEST	54027	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:41.979332924 CEST	443	54027	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.979953051 CEST	54028	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:41.979968071 CEST	443	54028	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.980952024 CEST	54028	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:41.980957031 CEST	443	54028	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.981637955 CEST	54026	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:41.981664896 CEST	443	54026	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:41.982832909 CEST	54026	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:41.982839108 CEST	443	54026	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.105937958 CEST	443	54029	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.106822014 CEST	54029	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.106832027 CEST	443	54029	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.107881069 CEST	54029	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.107897043 CEST	443	54029	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.110188961 CEST	443	54025	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.110423088 CEST	443	54025	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.110600948 CEST	54025	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.110827923 CEST	54025	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.110841036 CEST	443	54025	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.111506939 CEST	443	54028	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.111538887 CEST	443	54028	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.111579895 CEST	443	54028	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.111591101 CEST	54028	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.111632109 CEST	54028	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.111944914 CEST	54028	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.111963034 CEST	443	54028	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.112580061 CEST	443	54027	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.112677097 CEST	443	54027	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.112744093 CEST	54027	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.112931967 CEST	54027	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.112937927 CEST	443	54027	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.113409996 CEST	443	54026	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.113728046 CEST	443	54026	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.113812923 CEST	54026	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.115040064 CEST	54026	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.115063906 CEST	443	54026	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.115073919 CEST	54026	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.115081072 CEST	443	54026	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.126738071 CEST	54030	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.126770020 CEST	443	54030	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.126863003 CEST	54030	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.128528118 CEST	54031	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.128570080 CEST	443	54031	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.128654957 CEST	54031	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.129501104 CEST	54032	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.129523993 CEST	443	54032	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.129654884 CEST	54032	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.129730940 CEST	54031	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.129760027 CEST	443	54031	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.130310059 CEST	54033	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.130340099 CEST	443	54033	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.130466938 CEST	54030	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.130479097 CEST	443	54030	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.130491972 CEST	54033	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.130558014 CEST	54033	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.130568981 CEST	443	54033	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.130888939 CEST	54032	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.130898952 CEST	443	54032	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.245675087 CEST	443	54029	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.245752096 CEST	443	54029	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.245853901 CEST	54029	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.246330976 CEST	54029	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.246351004 CEST	443	54029	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.246445894 CEST	54029	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.246453047 CEST	443	54029	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.251749992 CEST	54034	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.251789093 CEST	443	54034	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.251857042 CEST	54034	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.252259016 CEST	54034	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.252276897 CEST	443	54034	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.874070883 CEST	443	54033	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.875077009 CEST	54033	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.875094891 CEST	443	54033	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.876200914 CEST	54033	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.876205921 CEST	443	54033	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.882448912 CEST	443	54031	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.883531094 CEST	54031	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.883543968 CEST	443	54031	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.884888887 CEST	54031	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.884896040 CEST	443	54031	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.890681028 CEST	443	54030	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.891407013 CEST	54030	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.891419888 CEST	443	54030	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.892625093 CEST	54030	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.892630100 CEST	443	54030	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.895111084 CEST	443	54032	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.895987034 CEST	54032	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.896023035 CEST	443	54032	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:42.896920919 CEST	54032	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:42.896939039 CEST	443	54032	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.007925034 CEST	443	54033	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.008023977 CEST	443	54033	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.008071899 CEST	443	54033	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.008121014 CEST	54033	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.008323908 CEST	54033	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.008342981 CEST	443	54033	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.008349895 CEST	54033	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.008356094 CEST	443	54033	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.011625051 CEST	54035	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.011652946 CEST	443	54035	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.011727095 CEST	54035	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.011873007 CEST	54035	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.011883974 CEST	443	54035	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.018893957 CEST	443	54031	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.018919945 CEST	443	54031	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.018963099 CEST	443	54031	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.018996954 CEST	54031	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.019062042 CEST	54031	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.019253016 CEST	54031	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.019272089 CEST	443	54031	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.019287109 CEST	54031	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.019304037 CEST	443	54031	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.022258997 CEST	54036	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.022288084 CEST	443	54036	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.022443056 CEST	54036	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.022572994 CEST	54036	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.022588015 CEST	443	54036	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.030611038 CEST	443	54034	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.031012058 CEST	54034	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.031040907 CEST	443	54034	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.031477928 CEST	54034	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.031483889 CEST	443	54034	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.034219980 CEST	443	54032	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.034506083 CEST	443	54032	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.034557104 CEST	54032	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.034584045 CEST	54032	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.034599066 CEST	443	54032	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.034609079 CEST	54032	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.034617901 CEST	443	54032	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.037020922 CEST	54037	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.037048101 CEST	443	54037	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.037123919 CEST	54037	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.037805080 CEST	54037	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.037816048 CEST	443	54037	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.037864923 CEST	443	54030	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.038072109 CEST	443	54030	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.038182020 CEST	54030	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.038219929 CEST	54030	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.038228035 CEST	443	54030	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.038238049 CEST	54030	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.038243055 CEST	443	54030	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.040607929 CEST	54038	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.040640116 CEST	443	54038	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.040790081 CEST	54038	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.040877104 CEST	54038	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.040890932 CEST	443	54038	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.172264099 CEST	443	54034	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.172328949 CEST	443	54034	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.172398090 CEST	54034	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.172715902 CEST	54034	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.172739029 CEST	443	54034	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.172771931 CEST	54034	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.172780991 CEST	443	54034	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.176371098 CEST	54039	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.176388025 CEST	443	54039	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.176461935 CEST	54039	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.176702976 CEST	54039	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.176716089 CEST	443	54039	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.767401934 CEST	443	54035	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.768486977 CEST	54035	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.768512011 CEST	443	54035	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.770625114 CEST	54035	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.770637989 CEST	443	54035	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.781361103 CEST	443	54036	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.782984972 CEST	54036	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.783004999 CEST	443	54036	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.783811092 CEST	54036	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.783823967 CEST	443	54036	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.785034895 CEST	443	54038	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.786253929 CEST	54038	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.786267996 CEST	443	54038	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.787581921 CEST	54038	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.787590981 CEST	443	54038	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.798500061 CEST	443	54037	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.799376011 CEST	54037	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.799408913 CEST	443	54037	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.800760031 CEST	54037	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.800766945 CEST	443	54037	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.906539917 CEST	443	54035	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.906606913 CEST	443	54035	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.906678915 CEST	54035	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.907145977 CEST	54035	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.907157898 CEST	443	54035	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.907169104 CEST	54035	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.907174110 CEST	443	54035	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.913865089 CEST	54040	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.913942099 CEST	443	54040	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.914067984 CEST	54040	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.914433956 CEST	54040	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.914444923 CEST	443	54040	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.918164968 CEST	443	54039	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.918555021 CEST	443	54036	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.918648005 CEST	443	54036	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.918692112 CEST	54036	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.918862104 CEST	54039	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.918875933 CEST	443	54039	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.919840097 CEST	54039	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.919845104 CEST	443	54039	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.920121908 CEST	54036	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.920145035 CEST	443	54036	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.920156002 CEST	54036	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.920164108 CEST	443	54036	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.920350075 CEST	443	54038	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.920521975 CEST	443	54038	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.920566082 CEST	443	54038	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.920583010 CEST	54038	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.920625925 CEST	54038	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.920641899 CEST	54038	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.920646906 CEST	443	54038	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.923968077 CEST	54041	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.924012899 CEST	443	54041	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.924161911 CEST	54041	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.924391985 CEST	54041	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.924403906 CEST	443	54041	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.928719044 CEST	54042	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.928740025 CEST	443	54042	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.928808928 CEST	54042	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.930691957 CEST	54042	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.930702925 CEST	443	54042	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.940493107 CEST	443	54037	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.940568924 CEST	443	54037	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.940629005 CEST	54037	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.941075087 CEST	54037	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.941090107 CEST	443	54037	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.941099882 CEST	54037	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.941106081 CEST	443	54037	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.946739912 CEST	54043	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.946782112 CEST	443	54043	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:43.946866035 CEST	54043	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.956716061 CEST	54043	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:43.956749916 CEST	443	54043	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.055959940 CEST	443	54039	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.056056976 CEST	443	54039	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.056107998 CEST	54039	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.067843914 CEST	54039	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.067866087 CEST	443	54039	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.067878962 CEST	54039	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.067887068 CEST	443	54039	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.113591909 CEST	54044	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.113648891 CEST	443	54044	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.113888979 CEST	54044	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.139756918 CEST	54044	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.139792919 CEST	443	54044	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.664375067 CEST	443	54040	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.665003061 CEST	54040	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.665029049 CEST	443	54040	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.665524960 CEST	54040	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.665530920 CEST	443	54040	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.674406052 CEST	443	54042	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.674954891 CEST	54042	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.674969912 CEST	443	54042	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.675394058 CEST	54042	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.675399065 CEST	443	54042	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.678345919 CEST	443	54041	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.678880930 CEST	54041	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.678908110 CEST	443	54041	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.679178953 CEST	54041	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.679187059 CEST	443	54041	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.740719080 CEST	443	54043	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.741332054 CEST	54043	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.741359949 CEST	443	54043	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.741857052 CEST	54043	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.741868019 CEST	443	54043	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.802175045 CEST	443	54040	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.802407026 CEST	443	54040	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.802464008 CEST	54040	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.802464962 CEST	443	54040	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.802527905 CEST	54040	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.802628994 CEST	54040	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.802647114 CEST	443	54040	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.802659035 CEST	54040	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.802666903 CEST	443	54040	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.805989027 CEST	54045	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.806040049 CEST	443	54045	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.806174040 CEST	54045	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.806397915 CEST	54045	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.806411028 CEST	443	54045	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.810578108 CEST	443	54042	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.810975075 CEST	443	54042	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.811022997 CEST	443	54042	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.811045885 CEST	54042	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.811089039 CEST	54042	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.811127901 CEST	54042	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.811136007 CEST	443	54042	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.811145067 CEST	54042	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.811148882 CEST	443	54042	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.813666105 CEST	54046	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.813694000 CEST	443	54046	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.813805103 CEST	54046	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.813951015 CEST	54046	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.813965082 CEST	443	54046	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.816433907 CEST	443	54041	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.816500902 CEST	443	54041	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.816561937 CEST	54041	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.816644907 CEST	54041	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.816663027 CEST	443	54041	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.816687107 CEST	54041	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.816693068 CEST	443	54041	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.819041014 CEST	54047	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.819082022 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.819344044 CEST	54047	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.819344044 CEST	54047	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.819377899 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.881753922 CEST	443	54043	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.881824970 CEST	443	54043	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.881942987 CEST	54043	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.882169008 CEST	54043	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.882189989 CEST	443	54043	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.882226944 CEST	54043	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.882234097 CEST	443	54043	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.885510921 CEST	54048	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.885555983 CEST	443	54048	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.885725021 CEST	54048	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.885864973 CEST	54048	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.885876894 CEST	443	54048	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.890132904 CEST	443	54044	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.890574932 CEST	54044	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.890594006 CEST	443	54044	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:44.891098022 CEST	54044	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:44.891104937 CEST	443	54044	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.027545929 CEST	443	54044	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.027573109 CEST	443	54044	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.027635098 CEST	443	54044	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.027745962 CEST	54044	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.027772903 CEST	54044	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.028163910 CEST	54044	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.028182983 CEST	443	54044	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.033221006 CEST	54049	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.033267021 CEST	443	54049	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.033468962 CEST	54049	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.033934116 CEST	54049	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.033945084 CEST	443	54049	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.562428951 CEST	443	54045	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.563247919 CEST	54045	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.563263893 CEST	443	54045	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.563610077 CEST	54045	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.563616037 CEST	443	54045	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.579541922 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.580131054 CEST	54047	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.580147028 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.580585003 CEST	54047	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.580590010 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.582006931 CEST	443	54046	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.582432985 CEST	54046	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.582461119 CEST	443	54046	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.582835913 CEST	54046	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.582843065 CEST	443	54046	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.641469002 CEST	443	54048	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.642086029 CEST	54048	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.642107964 CEST	443	54048	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.642585039 CEST	54048	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.642591953 CEST	443	54048	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.701569080 CEST	443	54045	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.701672077 CEST	443	54045	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.701730967 CEST	54045	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.701980114 CEST	54045	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.701997042 CEST	443	54045	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.702011108 CEST	54045	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.702017069 CEST	443	54045	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.705418110 CEST	54050	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.705476046 CEST	443	54050	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.705641031 CEST	54050	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.705842972 CEST	54050	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.705869913 CEST	443	54050	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.738717079 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.738739967 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.738851070 CEST	54047	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.738866091 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.738967896 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.739061117 CEST	54047	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.739197969 CEST	54047	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.739213943 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.739254951 CEST	54047	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.739259958 CEST	443	54047	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.739640951 CEST	443	54046	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.739672899 CEST	443	54046	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.739731073 CEST	54046	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.739741087 CEST	443	54046	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.739869118 CEST	54046	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.740170956 CEST	54046	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.740170956 CEST	54046	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.740200043 CEST	443	54046	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.740211010 CEST	443	54046	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.742682934 CEST	54051	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.742727041 CEST	443	54051	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.742896080 CEST	54052	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.742913008 CEST	54051	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.742950916 CEST	443	54052	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.743058920 CEST	54052	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.743151903 CEST	54052	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.743194103 CEST	443	54052	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.743294954 CEST	54051	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.743309021 CEST	443	54051	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.778369904 CEST	443	54048	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.778398991 CEST	443	54048	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.778445959 CEST	443	54048	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.778533936 CEST	54048	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.778845072 CEST	54048	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.778887033 CEST	443	54048	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.778929949 CEST	54048	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.778940916 CEST	443	54048	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.782274961 CEST	54053	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.782301903 CEST	443	54053	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.782610893 CEST	54053	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.782797098 CEST	54053	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.782810926 CEST	443	54053	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.799772024 CEST	443	54049	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.800326109 CEST	54049	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.800350904 CEST	443	54049	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.800832987 CEST	54049	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.800838947 CEST	443	54049	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.939301014 CEST	443	54049	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.939389944 CEST	443	54049	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.939460993 CEST	54049	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.939703941 CEST	54049	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.939718962 CEST	443	54049	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.939754963 CEST	54049	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.939760923 CEST	443	54049	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.943336964 CEST	54054	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.943391085 CEST	443	54054	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:45.943486929 CEST	54054	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.943701982 CEST	54054	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:45.943718910 CEST	443	54054	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.460134029 CEST	443	54050	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.460820913 CEST	54050	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.460855007 CEST	443	54050	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.461324930 CEST	54050	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.461330891 CEST	443	54050	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.493609905 CEST	443	54051	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.499110937 CEST	54051	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.499147892 CEST	443	54051	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.499746084 CEST	54051	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.499756098 CEST	443	54051	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.502960920 CEST	443	54052	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.503583908 CEST	54052	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.503601074 CEST	443	54052	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.504018068 CEST	54052	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.504029989 CEST	443	54052	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.537843943 CEST	443	54053	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.538583040 CEST	54053	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.538604021 CEST	443	54053	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.539169073 CEST	54053	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.539175987 CEST	443	54053	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.611021042 CEST	443	54050	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.611057997 CEST	443	54050	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.611105919 CEST	443	54050	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.611123085 CEST	54050	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.611161947 CEST	54050	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.611666918 CEST	54050	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.611686945 CEST	443	54050	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.611696005 CEST	54050	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.611701012 CEST	443	54050	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.615962029 CEST	54055	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.615997076 CEST	443	54055	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.616102934 CEST	54055	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.616394043 CEST	54055	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.616405964 CEST	443	54055	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.638195992 CEST	443	54051	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.638223886 CEST	443	54051	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.638276100 CEST	443	54051	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.638288021 CEST	54051	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.638318062 CEST	54051	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.638611078 CEST	54051	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.638638020 CEST	443	54051	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.638655901 CEST	54051	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.638663054 CEST	443	54051	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.642596960 CEST	443	54052	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.642657042 CEST	54056	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.642668009 CEST	443	54052	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.642700911 CEST	443	54056	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.642721891 CEST	54052	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.642787933 CEST	54056	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.642956018 CEST	54052	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.642971992 CEST	443	54052	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.642982006 CEST	54052	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.642987967 CEST	443	54052	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.643244028 CEST	54056	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.643258095 CEST	443	54056	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.647084951 CEST	54057	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.647125959 CEST	443	54057	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.647185087 CEST	54057	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.647398949 CEST	54057	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.647409916 CEST	443	54057	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.676290035 CEST	443	54053	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.676361084 CEST	443	54053	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.676415920 CEST	54053	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.676862001 CEST	54053	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.676881075 CEST	443	54053	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.676994085 CEST	54053	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.677000046 CEST	443	54053	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.681633949 CEST	54058	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.681668997 CEST	443	54058	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.681732893 CEST	54058	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.682167053 CEST	54058	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.682178974 CEST	443	54058	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.696819067 CEST	443	54054	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.698194027 CEST	54054	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.698211908 CEST	443	54054	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.698717117 CEST	54054	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.698724031 CEST	443	54054	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.834700108 CEST	443	54054	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.834767103 CEST	443	54054	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.834809065 CEST	54054	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.834811926 CEST	443	54054	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.834852934 CEST	54054	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.835417032 CEST	54054	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.835433960 CEST	443	54054	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.835470915 CEST	54054	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.835477114 CEST	443	54054	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.840332985 CEST	54059	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.840377092 CEST	443	54059	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:46.840435982 CEST	54059	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.840852022 CEST	54059	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:46.840863943 CEST	443	54059	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.384396076 CEST	443	54055	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.384993076 CEST	54055	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.385009050 CEST	443	54055	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.385673046 CEST	54055	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.385678053 CEST	443	54055	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.400399923 CEST	443	54057	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.401011944 CEST	54057	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.401040077 CEST	443	54057	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.401560068 CEST	54057	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.401566029 CEST	443	54057	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.407469034 CEST	443	54056	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.407967091 CEST	54056	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.407977104 CEST	443	54056	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.408761024 CEST	54056	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.408766985 CEST	443	54056	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.429331064 CEST	443	54058	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.429874897 CEST	54058	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.429893970 CEST	443	54058	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.430517912 CEST	54058	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.430522919 CEST	443	54058	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.526710033 CEST	443	54055	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.526779890 CEST	443	54055	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.526860952 CEST	54055	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.527164936 CEST	54055	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.527175903 CEST	443	54055	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.527231932 CEST	54055	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.527237892 CEST	443	54055	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.530872107 CEST	54060	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.530929089 CEST	443	54060	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.531081915 CEST	54060	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.531332970 CEST	54060	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.531359911 CEST	443	54060	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.538449049 CEST	443	54057	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.538733006 CEST	443	54057	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.538789034 CEST	54057	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.538845062 CEST	54057	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.538866043 CEST	443	54057	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.538873911 CEST	54057	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.538881063 CEST	443	54057	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.541754007 CEST	54061	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.541781902 CEST	443	54061	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.542069912 CEST	54061	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.542224884 CEST	54061	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.542237043 CEST	443	54061	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.547111988 CEST	443	54056	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.547143936 CEST	443	54056	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.547199965 CEST	443	54056	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.547274113 CEST	54056	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.547434092 CEST	54056	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.547446012 CEST	443	54056	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.547512054 CEST	54056	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.547518015 CEST	443	54056	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.550251007 CEST	54062	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.550303936 CEST	443	54062	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.550462961 CEST	54062	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.550621033 CEST	54062	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.550642967 CEST	443	54062	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.566550016 CEST	443	54058	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.566739082 CEST	443	54058	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.566792965 CEST	54058	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.566916943 CEST	54058	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.566935062 CEST	443	54058	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.566962957 CEST	54058	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.566968918 CEST	443	54058	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.570029020 CEST	54063	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.570050955 CEST	443	54063	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.570204020 CEST	54063	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.570399046 CEST	54063	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.570413113 CEST	443	54063	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.614188910 CEST	443	54059	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.615017891 CEST	54059	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.615041018 CEST	443	54059	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.615422010 CEST	54059	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.615428925 CEST	443	54059	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.752578020 CEST	443	54059	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.752897024 CEST	443	54059	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.752940893 CEST	443	54059	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.753005028 CEST	54059	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.753045082 CEST	54059	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.753062963 CEST	443	54059	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.753079891 CEST	54059	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.753086090 CEST	443	54059	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.756308079 CEST	54064	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.756340027 CEST	443	54064	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:47.756545067 CEST	54064	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.756731033 CEST	54064	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:47.756743908 CEST	443	54064	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.280390978 CEST	443	54060	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.281018972 CEST	54060	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.281044006 CEST	443	54060	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.281583071 CEST	54060	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.281596899 CEST	443	54060	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.301086903 CEST	443	54061	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.301708937 CEST	54061	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.301738024 CEST	443	54061	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.302208900 CEST	54061	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.302220106 CEST	443	54061	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.313658953 CEST	443	54062	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.314475060 CEST	54062	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.314496994 CEST	443	54062	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.315247059 CEST	54062	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.315259933 CEST	443	54062	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.335992098 CEST	443	54063	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.336700916 CEST	54063	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.336724997 CEST	443	54063	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.337362051 CEST	54063	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.337368011 CEST	443	54063	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.415496111 CEST	443	54060	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.415571928 CEST	443	54060	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.415647030 CEST	54060	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.415971041 CEST	54060	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.415971041 CEST	54060	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.415992022 CEST	443	54060	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.416004896 CEST	443	54060	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.419399023 CEST	54065	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.419447899 CEST	443	54065	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.419581890 CEST	54065	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.419806957 CEST	54065	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.419822931 CEST	443	54065	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.440885067 CEST	443	54061	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.441309929 CEST	443	54061	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.441370964 CEST	54061	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.441493988 CEST	54061	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.441505909 CEST	443	54061	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.441517115 CEST	54061	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.441523075 CEST	443	54061	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.445190907 CEST	54066	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.445233107 CEST	443	54066	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.445296049 CEST	54066	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.445476055 CEST	54066	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.445489883 CEST	443	54066	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.452619076 CEST	443	54062	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.452651978 CEST	443	54062	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.452709913 CEST	443	54062	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.452745914 CEST	54062	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.452745914 CEST	54062	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.453099012 CEST	54062	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.453099012 CEST	54062	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.453133106 CEST	443	54062	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.453146935 CEST	443	54062	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.456677914 CEST	54067	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.456722975 CEST	443	54067	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.456794024 CEST	54067	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.456971884 CEST	54067	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.456984043 CEST	443	54067	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.476238966 CEST	443	54063	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.476322889 CEST	443	54063	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.476373911 CEST	54063	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.476660013 CEST	54063	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.476680040 CEST	443	54063	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.476691008 CEST	54063	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.476696968 CEST	443	54063	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.480664968 CEST	54068	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.480693102 CEST	443	54068	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.480747938 CEST	54068	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.481019020 CEST	54068	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.481033087 CEST	443	54068	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.519983053 CEST	443	54064	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.520710945 CEST	54064	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.520737886 CEST	443	54064	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.521544933 CEST	54064	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.521552086 CEST	443	54064	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.658581972 CEST	443	54064	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.658612013 CEST	443	54064	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.658657074 CEST	443	54064	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.658689976 CEST	54064	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.658726931 CEST	54064	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.659024000 CEST	54064	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.659044027 CEST	443	54064	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.659054995 CEST	54064	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.659061909 CEST	443	54064	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.662781954 CEST	54069	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.662853956 CEST	443	54069	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:48.662919998 CEST	54069	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.663110971 CEST	54069	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:48.663124084 CEST	443	54069	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.177078009 CEST	443	54065	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.177858114 CEST	54065	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.177877903 CEST	443	54065	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.178457022 CEST	54065	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.178462982 CEST	443	54065	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.184926033 CEST	443	54066	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.185478926 CEST	54066	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.185511112 CEST	443	54066	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.185988903 CEST	54066	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.185995102 CEST	443	54066	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.232422113 CEST	443	54067	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.233181000 CEST	54067	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.233225107 CEST	443	54067	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.233736992 CEST	54067	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.233751059 CEST	443	54067	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.239067078 CEST	443	54068	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.239479065 CEST	54068	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.239501953 CEST	443	54068	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.239914894 CEST	54068	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.239922047 CEST	443	54068	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.315319061 CEST	443	54065	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.315490961 CEST	443	54065	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.315610886 CEST	54065	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.315685987 CEST	54065	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.315752029 CEST	54065	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.315764904 CEST	443	54065	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.315778017 CEST	54065	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.315783978 CEST	443	54065	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.319735050 CEST	443	54066	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.319820881 CEST	443	54066	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.319869041 CEST	54066	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.320039034 CEST	54066	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.320054054 CEST	443	54066	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.320360899 CEST	54070	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.320400953 CEST	443	54070	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.320636034 CEST	54070	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.320816040 CEST	54070	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.320832014 CEST	443	54070	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.322633028 CEST	54071	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.322666883 CEST	443	54071	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.323014975 CEST	54071	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.323127985 CEST	54071	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.323139906 CEST	443	54071	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.373282909 CEST	443	54067	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.373322010 CEST	443	54067	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.373375893 CEST	443	54067	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.373402119 CEST	54067	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.373461008 CEST	54067	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.373758078 CEST	54067	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.373758078 CEST	54067	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.373773098 CEST	443	54067	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.373783112 CEST	443	54067	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.376537085 CEST	443	54068	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.376704931 CEST	443	54068	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.376770020 CEST	54068	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.376854897 CEST	54068	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.376873970 CEST	443	54068	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.376888037 CEST	54068	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.376893997 CEST	443	54068	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.377145052 CEST	54072	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.377188921 CEST	443	54072	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.377444029 CEST	54072	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.377697945 CEST	54072	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.377710104 CEST	443	54072	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.379257917 CEST	54073	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.379292965 CEST	443	54073	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.379354954 CEST	54073	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.379813910 CEST	54073	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.379831076 CEST	443	54073	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.432706118 CEST	443	54069	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.433378935 CEST	54069	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.433403015 CEST	443	54069	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.433948040 CEST	54069	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.433957100 CEST	443	54069	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.573971033 CEST	443	54069	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.574031115 CEST	443	54069	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.574152946 CEST	54069	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.574333906 CEST	54069	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.574350119 CEST	443	54069	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.574366093 CEST	54069	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.574372053 CEST	443	54069	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.577620983 CEST	54074	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.577655077 CEST	443	54074	13.107.253.72	192.168.2.4
Oct 23, 2024 17:54:49.577717066 CEST	54074	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.577878952 CEST	54074	443	192.168.2.4	13.107.253.72
Oct 23, 2024 17:54:49.577888966 CEST	443	54074	13.107.253.72	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 17:53:24.679408073 CEST	53	59110	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:24.781347990 CEST	53	51799	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:24.781693935 CEST	53	49881	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:26.215282917 CEST	53	56661	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:28.314820051 CEST	51814	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:28.315121889 CEST	60542	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:28.359900951 CEST	53	60542	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:28.569608927 CEST	56674	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:28.569818020 CEST	58243	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:28.577265024 CEST	53	58243	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:28.577498913 CEST	53	56674	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:29.518171072 CEST	62173	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:29.518347025 CEST	50391	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:29.758059025 CEST	53	62173	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:29.758268118 CEST	53	50391	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:31.999027014 CEST	138	138	192.168.2.4	192.168.2.255
Oct 23, 2024 17:53:43.171969891 CEST	53	56825	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:49.633603096 CEST	53	57692	162.159.36.2	192.168.2.4
Oct 23, 2024 17:53:50.262409925 CEST	54799	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:50.270860910 CEST	53	54799	1.1.1.1	192.168.2.4
Oct 23, 2024 17:53:51.786988974 CEST	65286	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:53:51.795659065 CEST	53	65286	1.1.1.1	192.168.2.4
Oct 23, 2024 17:54:06.518805981 CEST	54808	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:54:06.527023077 CEST	53	54808	1.1.1.1	192.168.2.4
Oct 23, 2024 17:54:28.621669054 CEST	58006	53	192.168.2.4	1.1.1.1
Oct 23, 2024 17:54:28.861494064 CEST	53	58006	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 23, 2024 17:53:28.359965086 CEST	192.168.2.4	1.1.1.1	c270	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 17:53:28.314820051 CEST	192.168.2.4	1.1.1.1	0x7921	Standard query (0)	crmri.crm.dynamics.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:53:28.315121889 CEST	192.168.2.4	1.1.1.1	0xc8b9	Standard query (0)	crmri.crm.dynamics.com	65	IN (0x0001)	false
Oct 23, 2024 17:53:28.569608927 CEST	192.168.2.4	1.1.1.1	0xbfad	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:53:28.569818020 CEST	192.168.2.4	1.1.1.1	0x5a2a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 23, 2024 17:53:29.518171072 CEST	192.168.2.4	1.1.1.1	0x3e79	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:53:29.518347025 CEST	192.168.2.4	1.1.1.1	0x934	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Oct 23, 2024 17:53:50.262409925 CEST	192.168.2.4	1.1.1.1	0x60ce	Standard query (0)	241.42.69.40.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 23, 2024 17:53:51.786988974 CEST	192.168.2.4	1.1.1.1	0xd534	Standard query (0)	200.163.202.172.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 23, 2024 17:54:06.518805981 CEST	192.168.2.4	1.1.1.1	0x8f54	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:54:28.621669054 CEST	192.168.2.4	1.1.1.1	0x29b8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 17:53:28.350277901 CEST	1.1.1.1	192.168.2.4	0x7921	No error (0)	crmri.crm.dynamics.com	ritrackingservice3nam.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:53:28.359900951 CEST	1.1.1.1	192.168.2.4	0xc8b9	No error (0)	crmri.crm.dynamics.com	ritrackingservice3nam.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:53:28.577265024 CEST	1.1.1.1	192.168.2.4	0x5a2a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 17:53:28.577498913 CEST	1.1.1.1	192.168.2.4	0xbfad	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:53:29.758059025 CEST	1.1.1.1	192.168.2.4	0x3e79	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:53:29.758059025 CEST	1.1.1.1	192.168.2.4	0x3e79	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:53:29.758059025 CEST	1.1.1.1	192.168.2.4	0x3e79	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:53:29.758059025 CEST	1.1.1.1	192.168.2.4	0x3e79	No error (0)	HHN-efz.ms-acdc.office.com		52.98.179.66	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:53:29.758059025 CEST	1.1.1.1	192.168.2.4	0x3e79	No error (0)	HHN-efz.ms-acdc.office.com		52.98.243.34	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:53:29.758059025 CEST	1.1.1.1	192.168.2.4	0x3e79	No error (0)	HHN-efz.ms-acdc.office.com		52.98.179.50	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:53:29.758059025 CEST	1.1.1.1	192.168.2.4	0x3e79	No error (0)	HHN-efz.ms-acdc.office.com		52.98.243.2	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:53:29.758268118 CEST	1.1.1.1	192.168.2.4	0x934	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:53:50.270860910 CEST	1.1.1.1	192.168.2.4	0x60ce	Name error (3)	241.42.69.40.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 23, 2024 17:53:51.795659065 CEST	1.1.1.1	192.168.2.4	0xd534	Name error (3)	200.163.202.172.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 23, 2024 17:54:06.527023077 CEST	1.1.1.1	192.168.2.4	0x8f54	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:54:06.527023077 CEST	1.1.1.1	192.168.2.4	0x8f54	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:54:06.527023077 CEST	1.1.1.1	192.168.2.4	0x8f54	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:54:06.527023077 CEST	1.1.1.1	192.168.2.4	0x8f54	No error (0)	HHN-efz.ms-acdc.office.com		40.99.214.34	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:54:06.527023077 CEST	1.1.1.1	192.168.2.4	0x8f54	No error (0)	HHN-efz.ms-acdc.office.com		52.98.243.18	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:54:06.527023077 CEST	1.1.1.1	192.168.2.4	0x8f54	No error (0)	HHN-efz.ms-acdc.office.com		52.98.243.2	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:54:06.527023077 CEST	1.1.1.1	192.168.2.4	0x8f54	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.114	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:54:09.140544891 CEST	1.1.1.1	192.168.2.4	0x1bd4	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:54:09.140544891 CEST	1.1.1.1	192.168.2.4	0x1bd4	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:54:09.140544891 CEST	1.1.1.1	192.168.2.4	0x1bd4	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:54:28.861494064 CEST	1.1.1.1	192.168.2.4	0x29b8	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

outlook.office365.com

fs.microsoft.com

slscr.update.microsoft.com

fe3cr.delivery.mp.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	52.98.179.66	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:53:30 UTC	737	OUT	GET /owa/calendar/JaimeRubiano15minutemeeting@bookings.microsoft.com/bookings/ HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 15:53:31 UTC	1620	IN	HTTP/1.1 302 Cache-Control: private Content-Length: 203 Content-Type: text/html; charset=utf-8 Location: https://outlook.office365.com/book/JaimeRubiano15minutemeeting@bookings.microsoft.com/ Server: Microsoft-IIS/10.0 request-id: 9f2a77cd-1616-5eef-6907-5509e3a9dc6e Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedFETarget: DS7PR05CU002.internal.outlook.com X-BackEndHttpStatus: 302 Set-Cookie: ClientId=7F8734ECED854AAFAA2F1D16A4E3DBB6; expires=Thu, 23-Oct-2025 15:53:31 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=7F8734ECED854AAFAA2F1D16A4E3DBB6; expires=Thu, 23-Oct-2025 15:53:31 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Wed, 23-Apr-2025 15:53:31 GMT; path=/;SameSite=None; secure; HttpOnly X-CalculatedBETarget: DM4PR21MB3704.namprd21.prod.outlook.com X-BackEndHttpStatus: 302 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-CorrelationId: 20f2868f-d6cb-44e8-a575-016576c405c8 X-OWA-DiagnosticsInfo: 323;30;0; X-BackEnd-Begin: 2024-10-23T15:53:31.155 X-BackEnd-End: 2024-10-23T15:53:31.421 X-DiagInfo: DM4PR21MB3704 X-BEServer: DM4PR21MB3704 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 302 X-FEProxyInfo: FR5P281CA0001.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-FEServer: DS7PR05CA0035 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-FEServer: FR5P281CA0001 Date: Wed, 23 Oct 2024 15:53:31 GMT Connection: close
2024-10-23 15:53:31 UTC	203	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 2f 62 6f 6f 6b 2f 4a 61 69 6d 65 52 75 62 69 61 6e 6f 31 35 6d 69 6e 75 74 65 6d 65 65 74 69 6e 67 40 62 6f 6f 6b 69 6e 67 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://outlook.office365.com/book/JaimeRubiano15minutemeeting@bookings.microsoft.com/">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:53:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 15:53:32 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=89560 Date: Wed, 23 Oct 2024 15:53:32 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	52.98.179.66	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:53:32 UTC	779	OUT	GET /book/JaimeRubiano15minutemeeting@bookings.microsoft.com/ HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=7F8734ECED854AAFAA2F1D16A4E3DBB6; OIDC=1
2024-10-23 15:53:33 UTC	672	IN	HTTP/1.1 417 Expectation Failed Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 X-NanoProxy: 1,1 Request-Id: e84aa55f-f920-5c75-7448-017ed2479270 X-CalculatedFETarget: DM6PR02CU003.internal.outlook.com MS-CV: X6VK6CD5dVx0SAF+0keScA.1.1 x-besku: UNKNOWN X-BackEndHttpStatus: 417,417 X-BEPartition: CLNAMPRD21DM001 X-CalculatedBETarget: DS7PR21MB3693.NAMPRD21.PROD.OUTLOOK.COM X-FEEFZInfo: DSM X-FEProxyInfo: DM6PR02CA0073 X-FEServer: FR5P281CA0007 X-Proxy-BackendServerStatus: 417 X-Proxy-RoutingCorrectness: 1 X-FirstHopCafeEFZ: HHN Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 23 Oct 2024 15:53:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:53:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 15:53:33 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=89479 Date: Wed, 23 Oct 2024 15:53:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 15:53:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:53:33 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=CGhAe5lbpkLhKT3&MD=u87d4ZzA HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 15:53:34 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: dcf42d29-14c6-4b1f-9038-2220da7e567b MS-RequestId: d0036566-4a13-4017-906c-b6c46c880250 MS-CV: EnCrCo7r80ySPcFj.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 15:53:33 GMT Connection: close Content-Length: 24490
2024-10-23 15:53:34 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 15:53:34 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49751	52.98.179.66	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:53:46 UTC	811	OUT	GET /book/JaimeRubiano15minutemeeting@bookings.microsoft.com/ HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=7F8734ECED854AAFAA2F1D16A4E3DBB6; OIDC=1
2024-10-23 15:53:46 UTC	880	IN	HTTP/1.1 417 Expectation Failed Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 X-NanoProxy: 1,1 Request-Id: 7a632f64-43e8-4963-80ec-1701db024324 X-CalculatedFETarget: DM6PR06CU003.internal.outlook.com MS-CV: ZC9jeuhDY0mA7BcB2wJDJA.1.1 x-besku: UNKNOWN X-BackEndHttpStatus: 417,417 X-BEPartition: CLNAMPRD21DM001 X-CalculatedBETarget: DS7PR21MB3693.NAMPRD21.PROD.OUTLOOK.COM X-FEEFZInfo: DSM X-FEProxyInfo: DM6PR06CA0090 X-FEServer: FR5P281CA0008 X-Proxy-BackendServerStatus: 417 X-Proxy-RoutingCorrectness: 1 X-RoutingEntryUpdate: DatabaseGuid:927aad3a-5e2d-4853-9ef6-c9696a3f50d8@@=Server:2.0-DM4PR21MB3704~1~1/CY5PR21MB3710~4~3/IA1PR21MB3690~4~2/@namprd21.prod.outlook.com+1@638652889030697347 X-RUM-Validated: 1 X-FirstHopCafeEFZ: HHN Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 23 Oct 2024 15:53:45 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	53856	40.69.42.241	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:53:51 UTC	142	OUT	GET /clientwebservice/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: fe3cr.delivery.mp.microsoft.com
2024-10-23 15:53:51 UTC	234	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 15:53:51 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	53858	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:53:52 UTC	124	OUT	GET /sls/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: slscr.update.microsoft.com
2024-10-23 15:53:52 UTC	318	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 MS-CV: bVLhCz9FfUC/NWVt.0 MS-RequestId: 4cc615d4-b291-4e0b-ac8b-12f1b15092d2 MS-CorrelationId: 24742193-0641-4227-a4de-cd12fb5cb275 X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 15:53:51 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	53859	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:53:54 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=CGhAe5lbpkLhKT3&MD=u87d4ZzA HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 15:53:54 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1159fe65-675d-47ff-b7a0-5a88f76a3596 MS-RequestId: dec0cd17-da7a-44e9-a304-a6013a3a1f69 MS-CV: jhdTNtH1Dkynlztj.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 15:53:54 GMT Connection: close Content-Length: 24490
2024-10-23 15:53:54 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 15:53:54 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	53860	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:53:56 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=CGhAe5lbpkLhKT3&MD=u87d4ZzA HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 15:53:56 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 02cabbf1-eae9-439c-864e-41da8372ad85 MS-RequestId: fb7647d9-5479-44c4-ac69-9c5089b66c47 MS-CV: 00hPEmETjkKxkCBz.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 15:53:55 GMT Connection: close Content-Length: 30005
2024-10-23 15:53:56 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-23 15:53:56 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	52.98.179.66	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:06 UTC	811	OUT	GET /book/JaimeRubiano15minutemeeting@bookings.microsoft.com/ HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=7F8734ECED854AAFAA2F1D16A4E3DBB6; OIDC=1
2024-10-23 15:54:06 UTC	674	IN	HTTP/1.1 417 Expectation Failed Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 X-NanoProxy: 1,1 Request-Id: d94c061e-ef78-7bfb-dffc-fdd425d261dd X-CalculatedFETarget: DM5PR21CU002.internal.outlook.com MS-CV: HgZM2Xjv+3vf/P3UJdJh3Q.1.1 x-besku: UNKNOWN X-BackEndHttpStatus: 417,417 X-BEPartition: CLNAMPRD21DM001 X-CalculatedBETarget: DS7PR21MB3693.NAMPRD21.PROD.OUTLOOK.COM X-FEEFZInfo: DSM X-FEProxyInfo: DS2PEPF00004562 X-FEServer: FR5P281CA0003 X-Proxy-BackendServerStatus: 417 X-Proxy-RoutingCorrectness: 1 X-FirstHopCafeEFZ: HHN Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 23 Oct 2024 15:54:06 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	53862	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:09 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:10 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:09 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155409Z-17fbfdc98bb2fzn810kvcg2zng000000060000000000ca5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:10 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 15:54:10 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 15:54:10 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 15:54:10 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 15:54:10 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 15:54:10 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 15:54:10 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 15:54:10 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 15:54:10 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 15:54:10 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	53864	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:11 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:11 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 77f74883-b01e-0001-1a50-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155411Z-17fbfdc98bb8xnvm6t4x6ec5m400000005vg0000000079eq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:11 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	53865	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:11 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:11 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155411Z-r1755647c66j878m0wkraqty3800000006z00000000064bp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:11 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	53866	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:11 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:11 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155411Z-17fbfdc98bb4k5z6ayu7yh2rsn00000005yg00000000bchr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:11 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	53867	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:11 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:11 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155411Z-r1755647c66gb86l6k27ha2m1c00000006y0000000007r9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:11 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	53863	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:11 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:11 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155411Z-r1755647c66cdf7jx43n17haqc0000000990000000004b4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:11 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	53869	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:12 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155412Z-r1755647c66fnxpdavnqahfp1w00000006m000000000ahts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	53871	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:12 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:12 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 895e1389-601e-005c-16b8-20f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155412Z-r1755647c66wjht63r8k9qqnrs00000006yg000000007f90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:12 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	53868	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:12 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155412Z-r1755647c66kv68zfmyfrbcqzg0000000720000000000bxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	53870	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:12 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155412Z-r1755647c66z4pt7cv1pnqayy400000008d000000000c0pb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	53872	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:12 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:12 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:12 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155412Z-r1755647c66ww2rh494kknq3r00000000980000000007gtf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:12 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	53874	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:13 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:13 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 20eafa8b-401e-0067-4901-2009c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155413Z-r1755647c66mgrw7zd8m1pn55000000006vg00000000cf04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:13 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	53873	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:13 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155413Z-r1755647c66zs9x4962sbyaz1w00000006hg00000000c81c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	53876	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:13 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:13 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 48cb304a-401e-0064-7764-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155413Z-17fbfdc98bb75b2fuh11781a0n00000005xg0000000077a2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:13 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	53877	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:13 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a95f3241-e01e-0020-1c5d-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155413Z-17fbfdc98bb94gkbvedtsa5ef40000000640000000003mp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	53875	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:13 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155413Z-r1755647c66zs9x4962sbyaz1w00000006sg0000000001nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	53879	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:14 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155414Z-r1755647c66lljn2k9s29ch9ts00000008e000000000925s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	53878	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:14 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:14 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bb9292ef-d01e-00ad-5d35-21e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155414Z-r1755647c66n5bjpba5s4mu9d000000008fg000000006ek7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:14 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	53880	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:14 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0b49af96-c01e-0079-7092-1fe51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155414Z-r1755647c66prnf6k99z0m3kzc00000008f0000000007uc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	53881	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:14 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:14 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: b1dca041-701e-0001-1ae2-20b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155414Z-r1755647c66m4jttnz6nb8kzng00000006yg000000007v6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:14 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	53882	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:14 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:14 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155414Z-r1755647c66zkj29xnfn2r3bwn00000005hg00000000a587 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:14 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	53883	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:15 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155415Z-r1755647c66z4pt7cv1pnqayy400000008dg0000000098an x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 15:54:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	53884	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:15 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155415Z-17fbfdc98bbkw9phumvsc7yy8w00000005xg000000009r6k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	53886	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:15 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6949b098-b01e-0084-1a35-21d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155415Z-r1755647c66d87vp2n0g7qt8bn00000007p000000000bh27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	53885	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:15 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:15 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155415Z-r1755647c66nxct5p0gnwngmx000000007p0000000009vhk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:15 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	53887	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:15 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:15 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155415Z-17fbfdc98bbndwgn5b4pg7s8bs00000005yg000000005p3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:15 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	53888	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:15 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:16 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155416Z-17fbfdc98bbx4f4q0941cebmvs00000005wg000000007zky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:16 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	53890	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:15 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155416Z-17fbfdc98bbnhb2b0umpa641c800000005u000000000bga9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	53889	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:16 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155416Z-r1755647c66m4jttnz6nb8kzng00000006v000000000c2y2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	53891	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:16 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 55f0b2c4-501e-008f-5c50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155416Z-17fbfdc98bbx648l6xmxqcmf2000000005x000000000atcq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	53892	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:16 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 265f42d2-801e-0047-38c8-207265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155416Z-r1755647c66l72xfkr6ug378ks00000007ag000000007e7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	53893	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:16 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:16 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155416Z-17fbfdc98bb7k7m5sdc8baghes000000063g000000003x9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:17 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	53895	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:16 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155416Z-r1755647c66ww2rh494kknq3r0000000099g0000000045y7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	53896	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:16 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 5cd52618-301e-0033-5865-23fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155416Z-17fbfdc98bb2fzn810kvcg2zng000000064g000000005zm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:17 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	53894	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:16 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155416Z-r1755647c66f2zlraraf0y5hrs0000000720000000000cb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	53897	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:16 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:16 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155416Z-r1755647c668mbb8rg8s8fbge400000005d0000000002d8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:17 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	53898	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:17 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:17 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 45bb941c-f01e-003c-6892-1f8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155417Z-r1755647c66n5bjpba5s4mu9d000000008h0000000003rq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:17 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	53901	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:17 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:17 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155417Z-r1755647c66mgrw7zd8m1pn5500000000700000000004c19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:17 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	53900	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:17 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:17 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 95a4abee-901e-0016-6e50-23efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155417Z-17fbfdc98bblvnlh5w88rcarag000000061000000000aw64 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:17 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	53899	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:17 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155417Z-r1755647c66nxct5p0gnwngmx000000007tg000000001d7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	53902	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:17 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:17 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1b8ca13b-901e-008f-4667-2067a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155417Z-r1755647c66lljn2k9s29ch9ts00000008bg00000000cfe9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:17 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	53903	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:18 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:18 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62ae5dc2-001e-0079-2456-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155418Z-17fbfdc98bb94gkbvedtsa5ef400000006500000000012h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:18 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	53904	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:18 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:18 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1bb7fc0c-c01e-0046-7759-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155418Z-17fbfdc98bbgpkh7048gc3vfcc0000000630000000009bc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:18 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	53905	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:18 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:18 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0c1e418e-701e-0021-2a50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155418Z-17fbfdc98bbqc8zsbguzmabx6800000005u000000000axk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:18 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	53906	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:18 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:18 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 68ab0001-401e-0064-04b8-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155418Z-r1755647c66ww2rh494kknq3r000000009a0000000002315 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:18 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	53907	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:18 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:18 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 8d905448-c01e-0079-0365-23e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155418Z-17fbfdc98bbcrtjhdvnfuyp2880000000630000000008e2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:18 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	53908	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:19 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:19 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f651688a-e01e-0071-5b56-2308e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155419Z-17fbfdc98bblvnlh5w88rcarag000000065g0000000041p6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:19 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	53909	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:19 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0688ef78-901e-0029-5550-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155419Z-17fbfdc98bbqc8zsbguzmabx68000000060g000000000335 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	53910	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:19 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: e93de7dd-201e-006e-73e3-20bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155419Z-r1755647c66wjht63r8k9qqnrs00000006y0000000008g40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	53911	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:19 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94247a1c-101e-0079-199a-245913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155419Z-17fbfdc98bbgqz661ufkm7k13c00000006100000000014hh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	53912	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:19 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155419Z-r1755647c66xrxq4nv7upygh4s00000001vg00000000c4pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	53913	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:20 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b6a35dc4-401e-008c-3156-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155420Z-17fbfdc98bb94gkbvedtsa5ef40000000600000000009mxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	53914	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:20 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155420Z-17fbfdc98bbnpjstwqrbe0re7n00000006200000000013f2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	53916	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:20 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: f2e4413f-c01e-000b-5f59-23e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155420Z-17fbfdc98bblptj7fr9s141cpc00000005xg00000000ae31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	53915	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:20 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155420Z-r1755647c669hnl7dkxy835cqc000000068g0000000054y8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	53917	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:20 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155420Z-17fbfdc98bbrx2rj4asdpg8sbs00000001vg00000000bsab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	53920	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:21 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:21 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 750d06c7-901e-0083-2d5b-20bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155421Z-r1755647c66xn9fj09y3bhxnh4000000094g00000000bq5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:21 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	53918	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:21 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:21 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8832b605-d01e-0014-3350-23ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155421Z-17fbfdc98bbvwcxrk0yzwg4d5800000006300000000054ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:21 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	53921	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:21 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155421Z-17fbfdc98bb9tt772yde9rhbm8000000061g0000000041dc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	53922	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:21 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:21 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: e131a16a-201e-005d-6a5d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155421Z-17fbfdc98bbx4f4q0941cebmvs00000005z0000000004udt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:22 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	53919	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:21 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:21 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 97d7c53d-b01e-001e-2be3-200214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155421Z-r1755647c66zkj29xnfn2r3bwn00000005ng000000005yfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:22 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	53923	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:23 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:23 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155423Z-r1755647c66wjht63r8k9qqnrs00000006z00000000071vx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:23 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	53924	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:23 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1c36e671-f01e-0096-085a-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155423Z-17fbfdc98bb2fzn810kvcg2zng000000061g00000000ahkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	53927	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:23 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f2361012-b01e-003e-18e4-218e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155423Z-r1755647c66x46wg1q56tyyk6800000007r000000000742c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:23 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	53925	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:23 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:23 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: df53dfe1-801e-0067-2856-23fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155423Z-17fbfdc98bbnmnfvzuhft9x8zg00000004r0000000007cyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:23 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	53926	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:23 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ae9ee863-001e-000b-78d3-2015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155423Z-r1755647c66m4jttnz6nb8kzng00000006v000000000c36f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:23 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	53930	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:24 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155424Z-r1755647c66h2wzt2z0cr0zc7400000002n00000000059nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	53928	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:24 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 2067cf5d-601e-0001-3659-23faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155424Z-17fbfdc98bbvf2fnx6t6w0g25n00000005y000000000b504 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	53931	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:24 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155424Z-17fbfdc98bb75b2fuh11781a0n00000005ug00000000b3p7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	53929	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:24 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:24 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155424Z-17fbfdc98bb94gkbvedtsa5ef4000000065g00000000071x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:24 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	53932	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:24 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:24 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155424Z-17fbfdc98bb96dqv0e332dtg6000000005zg000000004efq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	53933	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:25 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 5871072e-001e-0034-4bb0-20dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155425Z-r1755647c66d87vp2n0g7qt8bn00000007r0000000007pu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	53934	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:25 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 610ea227-401e-00ac-206b-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155425Z-17fbfdc98bbpc9nz0r22pywp08000000060g00000000b3mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	53935	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:25 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:25 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155425Z-r1755647c66cdf7jx43n17haqc00000009800000000065qb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:25 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	53936	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:25 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 84bcad4d-101e-007a-3592-1f047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155425Z-r1755647c66k9st9tvd58z9dg800000008bg00000000c1fq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	53938	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:25 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:25 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155425Z-r1755647c66h2wzt2z0cr0zc7400000002q00000000014xc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:25 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	53942	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:26 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:26 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155426Z-r1755647c66gb86l6k27ha2m1c00000006ug00000000df9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:26 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	53940	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:26 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:26 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155426Z-17fbfdc98bbq2x5bzrteug30v8000000060g000000005y64 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:26 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	53941	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:26 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:26 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155426Z-r1755647c66xrxq4nv7upygh4s00000001zg0000000066fy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:26 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	53943	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:26 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:26 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 6d4b4f71-e01e-00aa-4a56-23ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155426Z-17fbfdc98bbnhb2b0umpa641c800000005yg0000000062h9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:26 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	53939	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:26 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:26 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155426Z-17fbfdc98bbx648l6xmxqcmf2000000005w000000000bpew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:26 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	53944	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:27 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:27 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: aaa69ab3-801e-0047-5050-237265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155427Z-17fbfdc98bbk7nhquz3tfc3wbg00000005zg000000007gn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:27 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	53946	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:27 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:27 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5a8d2ac8-001e-0034-336b-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155427Z-17fbfdc98bb4k5z6ayu7yh2rsn0000000630000000004y1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:27 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	53945	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:27 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:27 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 46032cb8-c01e-007a-5b59-23b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155427Z-17fbfdc98bbndwgn5b4pg7s8bs0000000600000000002u8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:27 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	53947	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:27 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:27 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 48cb41bd-401e-0064-5c64-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155427Z-17fbfdc98bb96dqv0e332dtg600000000600000000003cka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:27 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	53948	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:27 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:27 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155427Z-r1755647c66d87vp2n0g7qt8bn00000007mg00000000c98s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:27 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	53949	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:27 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:27 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155427Z-r1755647c66tmf6g4720xfpwpn000000095g00000000b9ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:28 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	53951	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:27 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:27 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155427Z-17fbfdc98bbgzrcvp7acfz2d30000000060000000000ahzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:28 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	53950	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:27 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:27 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: b7bcbf2c-f01e-0071-0ae2-20431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155427Z-r1755647c66n5bjpba5s4mu9d000000008cg00000000b70g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:28 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	53952	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:27 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:28 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155428Z-17fbfdc98bblptj7fr9s141cpc0000000630000000000z13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:28 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	53953	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:28 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:28 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155428Z-r1755647c66nxct5p0gnwngmx000000007p0000000009vuc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:28 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	53954	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:28 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:29 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c39afafb-e01e-001f-695d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155429Z-17fbfdc98bbgpkh7048gc3vfcc0000000620000000009qxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:29 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	53957	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:28 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:29 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ef02ab36-401e-0064-3bb0-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155429Z-r1755647c66j878m0wkraqty3800000006xg000000008qtk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:29 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	53955	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:28 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:29 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155429Z-r1755647c66vrwbmeqw88hpesn000000083000000000ct2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:29 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	53956	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:28 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:29 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155429Z-17fbfdc98bbnpjstwqrbe0re7n00000006200000000013sq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:29 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	53958	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:28 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:29 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 333fed2f-601e-003d-6b17-246f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155429Z-r1755647c66dj7986akr8tvaw400000007ng00000000b6vn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:29 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	53960	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:29 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: dc072958-d01e-0065-5150-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155429Z-17fbfdc98bb75b2fuh11781a0n00000005vg00000000a4ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:30 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	53962	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:29 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: c2ed4d23-701e-0098-0959-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155429Z-17fbfdc98bb94gkbvedtsa5ef4000000065g000000000774 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:30 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	53963	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:29 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155429Z-r1755647c669hnl7dkxy835cqc000000064000000000ashb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:30 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	53961	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:29 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:29 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: d2e4573f-901e-0067-4de3-20b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155429Z-r1755647c66n5bjpba5s4mu9d000000008dg000000009zvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:30 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	53964	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:29 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155429Z-r1755647c66tmf6g4720xfpwpn000000095g00000000b9wk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:30 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	53965	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:30 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:30 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155430Z-r1755647c66h2wzt2z0cr0zc7400000002q000000000153y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:30 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	53966	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:30 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:30 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155430Z-r1755647c66d87vp2n0g7qt8bn00000007rg000000006201 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:30 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	53967	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:30 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:30 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cc75a80d-201e-0096-720b-22ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155430Z-r1755647c66f2zlraraf0y5hrs000000070g000000003amu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:30 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	53968	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:30 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:30 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155430Z-r1755647c66dj7986akr8tvaw400000007r0000000008c80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:30 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	53969	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:30 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:30 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155430Z-r1755647c66xn9fj09y3bhxnh40000000970000000008fx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:30 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	53971	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:31 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:31 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155431Z-17fbfdc98bb2fzn810kvcg2zng000000060g00000000avrz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:31 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	53970	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:31 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:31 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155431Z-r1755647c66k9st9tvd58z9dg800000008g0000000005fb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:31 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	53972	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:31 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:31 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155431Z-r1755647c66l72xfkr6ug378ks000000078000000000awxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:31 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	53973	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:31 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:31 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155431Z-r1755647c66zs9x4962sbyaz1w00000006s0000000000u4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	53974	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:31 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:31 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155431Z-17fbfdc98bbvwcxrk0yzwg4d5800000005y000000000c3cx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:31 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	53977	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:32 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155432Z-17fbfdc98bbnmnfvzuhft9x8zg00000004q000000000969r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	53975	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:32 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:32 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 475da012-701e-0001-146c-23b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155432Z-17fbfdc98bbgpkh7048gc3vfcc000000060g00000000bs34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:32 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	53976	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:32 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e338167f-e01e-003c-7dcf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155432Z-r1755647c66ww2rh494kknq3r0000000096g0000000091xw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	53978	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:32 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:32 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155432Z-r1755647c66sxs9zhy17bg185w00000009b0000000000aas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:32 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	53979	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:32 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:32 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155432Z-r1755647c66nxct5p0gnwngmx000000007ng00000000b180 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:32 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	53980	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:33 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155433Z-r1755647c66m4jttnz6nb8kzng00000006x000000000a3n4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	53983	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:33 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:33 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: e889516a-701e-003e-5092-1f79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155433Z-r1755647c66xn9fj09y3bhxnh400000009b0000000000f1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:33 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	53981	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:33 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 728679af-d01e-007a-566c-23f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155433Z-17fbfdc98bbqc8zsbguzmabx6800000005ug00000000a5ey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	53982	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:33 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 05a445fd-e01e-0033-109d-244695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155433Z-r1755647c66r2hg89mqr09g9w000000000ug000000004xbh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	53984	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:33 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:33 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 23449c74-401e-0083-0a50-23075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155433Z-17fbfdc98bbrx2rj4asdpg8sbs00000001vg00000000bsu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:33 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	53986	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:34 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:34 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155434Z-r1755647c66nfj7t97c2qyh6zg000000057g00000000b2af x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:34 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	53985	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:34 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:34 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155434Z-r1755647c66mgrw7zd8m1pn55000000006xg000000008q4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:34 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	53989	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:34 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:34 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155434Z-r1755647c66k9st9tvd58z9dg800000008b000000000cdyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:34 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	53988	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:34 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:34 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 6956eb8a-901e-0064-8092-1fe8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155434Z-r1755647c66kmfl29f2su56tc400000009b00000000004f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:34 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	53987	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:34 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:34 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: ee3730f2-f01e-003f-725a-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155434Z-17fbfdc98bb94gkbvedtsa5ef4000000062g000000005trp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:34 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	53992	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:35 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:35 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155435Z-r1755647c66zkj29xnfn2r3bwn00000005p00000000050cf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:35 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	53990	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:35 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:35 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: fa7d2ad1-701e-0098-7450-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155435Z-17fbfdc98bbgqz661ufkm7k13c00000005zg00000000408v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:35 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	53991	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:35 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:35 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 26312148-601e-003e-327a-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155435Z-17fbfdc98bb8xnvm6t4x6ec5m400000005u0000000009y7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:35 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	53994	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:35 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:35 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155435Z-17fbfdc98bbgqz661ufkm7k13c00000005x0000000007w40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:35 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	53993	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:35 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:35 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 80b3223a-a01e-0002-4456-235074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155435Z-17fbfdc98bb96dqv0e332dtg60000000060g000000002egq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:35 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	53997	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:36 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:36 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c25cd208-b01e-0070-595d-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155436Z-17fbfdc98bb7k7m5sdc8baghes00000005yg00000000bxzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:36 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	53995	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:36 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:36 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b7d5c986-501e-005b-0250-23d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155436Z-17fbfdc98bb9dlh7es9mrdw2qc00000005zg000000000dme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:36 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	53996	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:36 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:36 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155436Z-r1755647c66zs9x4962sbyaz1w00000006hg00000000c8eq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:36 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	53998	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:36 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:36 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: d9c148d9-d01e-00ad-325d-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155436Z-17fbfdc98bbg2mc9qrpn009kgs000000060000000000b1cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:36 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	53999	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:36 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:36 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 9e5c5f24-f01e-001f-3156-235dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155436Z-17fbfdc98bb7qlzm4x52d2225c00000005z0000000008u3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:36 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	54000	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:37 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 472c62b4-c01e-00a1-2e5d-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155437Z-17fbfdc98bbx4f4q0941cebmvs00000005u000000000c9f1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	54001	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:37 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: c74ac4a3-f01e-0096-7a16-2410ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155437Z-r1755647c66kv68zfmyfrbcqzg00000006x0000000009cyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	54002	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 15:54:37 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 15:54:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 15:54:37 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: b91d5e6a-e01e-0085-2c6c-23c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T155437Z-17fbfdc98bbk7nhquz3tfc3wbg00000005y0000000009a26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 15:54:37 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1892, Parent PID: 5776

General

Target ID:	0
Start time:	11:53:20
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1900, Parent PID: 1892

General

Target ID:	2
Start time:	11:53:22
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2004,i,13061649624349182603,857125993022094789,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6332, Parent PID: 5776

General

Target ID:	3
Start time:	11:53:27
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://crmri.crm.dynamics.com/api/EmailAnalytics/OpenLink?TrackingId=659cf4f2-4d91-ef11-ac21-000d3a56f3be&ConversationTrackingId=e128c86a-df31-48c7-b419-f5dd100bada6&ClientType=webclient&OrganizationId=aeae68a5-57e4-49ca-a82c-f2df71524041&Salt=30a65c1c-a240-495b-a4c0-d65d7dcbd0bd&RedirectUrl=https%3a%2f%2foutlook.office365.com%2fowa%2fcalendar%2fJaimeRubiano15minutemeeting%40bookings.microsoft.com%2fbookings%2f&ValidityToken=ekPdlX6P0%2b21E5TNtc5DHCTEQmFIpI2OUrJ55EeRFaQ%3d"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 1892, Parent PID: 5776

General

Chronological Activities

Analysis Process: chrome.exePID: 1900, Parent PID: 1892

General

Chronological Activities

Analysis Process: chrome.exePID: 6332, Parent PID: 5776

General

Chronological Activities

Disassembly