Edit tour

Windows Analysis Report
https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2

Overview

General Information

Sample URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr0
Analysis ID:	1540576
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2136,i,1293478387212524177,9404733510419667675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:61503 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:61564 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:61578 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:61500 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX HTTP/1.1Host: email.sg.on24event.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: email.sg.on24event.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DXAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: email.sg.on24event.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 23 Oct 2024 21:08:05 GMTContent-Type: text/htmlContent-Length: 564Connection: close

Source: unknown	Network traffic detected: HTTP traffic on port 61522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 61568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61509
Source: unknown	Network traffic detected: HTTP traffic on port 61580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61508
Source: unknown	Network traffic detected: HTTP traffic on port 61539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61581
Source: unknown	Network traffic detected: HTTP traffic on port 61516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61583
Source: unknown	Network traffic detected: HTTP traffic on port 61577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61584
Source: unknown	Network traffic detected: HTTP traffic on port 61531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 61554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61588
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61513
Source: unknown	Network traffic detected: HTTP traffic on port 61557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61519
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61511
Source: unknown	Network traffic detected: HTTP traffic on port 61519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61524
Source: unknown	Network traffic detected: HTTP traffic on port 61533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61529
Source: unknown	Network traffic detected: HTTP traffic on port 61552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61522
Source: unknown	Network traffic detected: HTTP traffic on port 61569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61539
Source: unknown	Network traffic detected: HTTP traffic on port 61530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61530
Source: unknown	Network traffic detected: HTTP traffic on port 61555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61532
Source: unknown	Network traffic detected: HTTP traffic on port 61538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61533
Source: unknown	Network traffic detected: HTTP traffic on port 61503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61545
Source: unknown	Network traffic detected: HTTP traffic on port 61558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61547
Source: unknown	Network traffic detected: HTTP traffic on port 61512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61540
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61542
Source: unknown	Network traffic detected: HTTP traffic on port 61550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61544
Source: unknown	Network traffic detected: HTTP traffic on port 61546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61558
Source: unknown	Network traffic detected: HTTP traffic on port 61584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61559
Source: unknown	Network traffic detected: HTTP traffic on port 61515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61550
Source: unknown	Network traffic detected: HTTP traffic on port 61578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61552
Source: unknown	Network traffic detected: HTTP traffic on port 61532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61554
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61555
Source: unknown	Network traffic detected: HTTP traffic on port 61570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61567
Source: unknown	Network traffic detected: HTTP traffic on port 61508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61569
Source: unknown	Network traffic detected: HTTP traffic on port 61585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61563
Source: unknown	Network traffic detected: HTTP traffic on port 61556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61565
Source: unknown	Network traffic detected: HTTP traffic on port 61537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61566
Source: unknown	Network traffic detected: HTTP traffic on port 61571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61580
Source: unknown	Network traffic detected: HTTP traffic on port 61540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61579
Source: unknown	Network traffic detected: HTTP traffic on port 61582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61570
Source: unknown	Network traffic detected: HTTP traffic on port 61576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61575
Source: unknown	Network traffic detected: HTTP traffic on port 61517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61577

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:61503 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:61564 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:61578 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@21/4@4/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2136,i,1293478387212524177,9404733510419667675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2136,i,1293478387212524177,9404733510419667675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
r-email.sg.on24event.com	199.83.44.68	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
email.sg.on24event.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://email.sg.on24event.com/favicon.ico	false		unknown
https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
199.83.44.68	r-email.sg.on24event.com	United States	18742	ON24-SACUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540576
Start date and time:	2024-10-23 23:07:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@21/4@4/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.186.78, 142.251.168.84, 34.104.35.123, 20.109.210.53, 93.184.221.240, 192.229.221.95, 20.3.187.198, 13.95.31.18, 142.250.185.195
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	564
Entropy (8bit):	4.72971822420855
Encrypted:	false
SSDEEP:	12:TjeRHdHiHZdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH988DTPTPTPTPTPTc
MD5:	8E325DC2FEA7C8900FC6C4B8C6C394FE
SHA1:	1B3291D4EEA179C84145B2814CB53E6A506EC201
SHA-256:	0B52C5338AF355699530A47683420E48C7344E779D3E815FF9943CBFDC153CF2
SHA-512:	084C608F1F860FB08EF03B155658EA9988B3628D3C0F0E9561FDFF930E5912004CDDBCC43B1FA90C21FE7F5A481AC47C64B8CAA066C2BDF3CF533E152BF96C14
Malicious:	false
Reputation:	low
URL:	https://email.sg.on24event.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body bgcolor="white">..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	4.477778146874743
Encrypted:	false
SSDEEP:	6:qzxUsjMR1X96b2+Ubghxc8le3rn9MGzMd4aa6++Oix9qD:kxBMR1knUkhGXpPoa6++3xMD
MD5:	F0C66914A58FC74FC98A7C9BB4C288F2
SHA1:	3E0E43F567138623CABFF91C14100D144AC56949
SHA-256:	54E173BE753D03B2C163CEBBEE02BE7F4BDC1D6663154D4D60A3833F7BA3436B
SHA-512:	7AEDAEBA112D43E2B2FF845355199A11A141D637C0306155BE2356AE297DF118D2C0D2768D44C35A1D89841DB428E95686E29E9D15DEADF4233F3713893514BF
Malicious:	false
Reputation:	low
URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX
Preview:	<html><head><title>Wrong Link</title></head><body><h1>Wrong Link</h1><p>You have clicked on an invalid link. Please make sure that you have typed the link correctly. If are copying this link from a mail reader please ensure that you have copied all the lines in the link.</p></body></html>

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 23:08:02.949279070 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 23, 2024 23:08:03.902060032 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:03.902107954 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:03.902180910 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:03.902457952 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:03.902486086 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:03.902544022 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:03.902648926 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:03.902666092 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:03.902853966 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:03.902869940 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.729737997 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.730029106 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.730058908 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.731725931 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.731787920 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.732790947 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.732888937 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.733000040 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.733016968 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.734565020 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.734853029 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.734883070 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.736545086 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.736610889 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.737495899 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.737581968 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.773808002 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.789720058 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.789782047 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.837558985 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.925746918 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.944165945 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.944257021 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.944629908 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:04.944653034 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:04.993659019 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:05.035360098 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:05.187403917 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:05.206459045 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:05.206589937 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:05.206962109 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 23, 2024 23:08:05.207004070 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 23, 2024 23:08:06.000016928 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:08:06.000068903 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 23, 2024 23:08:06.000133991 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:08:06.000432968 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:08:06.000453949 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 23, 2024 23:08:06.630990982 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:06.631077051 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:06.631174088 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:06.632694960 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:06.632724047 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:06.886918068 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 23, 2024 23:08:06.887177944 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:08:06.887193918 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 23, 2024 23:08:06.888844013 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 23, 2024 23:08:06.888911009 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:08:06.889836073 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:08:06.889924049 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 23, 2024 23:08:06.941849947 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:08:06.941869020 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 23, 2024 23:08:06.988739967 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:08:07.485728025 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:07.485847950 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:07.492090940 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:07.492120028 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:07.492458105 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:07.536766052 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:07.545296907 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:07.587342978 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:07.944806099 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:07.944953918 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:07.949301004 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:07.963402033 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:07.963421106 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:07.963474035 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:07.963488102 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:08.045288086 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:08.045355082 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:08.045510054 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:08.045871973 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:08.045902014 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:08.892384052 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:08.892637968 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:08.894597054 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:08.894612074 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:08.894947052 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:08.897485971 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:08.939335108 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:09.152458906 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:09.152597904 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:09.152698994 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:09.153906107 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:09.153906107 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 23, 2024 23:08:09.153934002 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:09.153949976 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 23, 2024 23:08:16.890340090 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 23, 2024 23:08:16.890400887 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 23, 2024 23:08:16.890470982 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:08:18.398641109 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:08:18.398662090 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 23, 2024 23:08:20.994316101 CEST	49723	80	192.168.2.4	2.19.126.163
Oct 23, 2024 23:08:21.000421047 CEST	80	49723	2.19.126.163	192.168.2.4
Oct 23, 2024 23:08:21.000466108 CEST	49723	80	192.168.2.4	2.19.126.163
Oct 23, 2024 23:08:35.296613932 CEST	80	49724	217.20.57.34	192.168.2.4
Oct 23, 2024 23:08:35.296731949 CEST	49724	80	192.168.2.4	217.20.57.34
Oct 23, 2024 23:08:35.344463110 CEST	49724	80	192.168.2.4	217.20.57.34
Oct 23, 2024 23:08:35.350096941 CEST	80	49724	217.20.57.34	192.168.2.4
Oct 23, 2024 23:08:43.482693911 CEST	61500	53	192.168.2.4	1.1.1.1
Oct 23, 2024 23:08:43.488480091 CEST	53	61500	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:43.488573074 CEST	61500	53	192.168.2.4	1.1.1.1
Oct 23, 2024 23:08:43.488650084 CEST	61500	53	192.168.2.4	1.1.1.1
Oct 23, 2024 23:08:43.494081974 CEST	53	61500	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:44.085000038 CEST	53	61500	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:44.085849047 CEST	61500	53	192.168.2.4	1.1.1.1
Oct 23, 2024 23:08:44.092350006 CEST	53	61500	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:44.092552900 CEST	61500	53	192.168.2.4	1.1.1.1
Oct 23, 2024 23:08:57.294051886 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:57.294086933 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:57.296300888 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:57.296937943 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:57.296951056 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:58.837129116 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:58.837385893 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:58.841480017 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:58.841490030 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:58.841794014 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:58.857567072 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:58.899348021 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.111002922 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.111057997 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.111125946 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.111181021 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.111201048 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.111212015 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.111331940 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.229948997 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.230001926 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.230051041 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.230078936 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.230242968 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.230242968 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.348562956 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.348628044 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.348681927 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.348695040 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.348723888 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.348859072 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.468113899 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.468183041 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.468202114 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.468216896 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.468261957 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.468261957 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.586806059 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.586882114 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.586987019 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.586987019 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.587004900 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.587299109 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.705096960 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.705121994 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.705265045 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.705265999 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.705280066 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.705323935 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.825598955 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.825623035 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.825695992 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.825705051 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.825737953 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.825777054 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.944613934 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.944670916 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.944717884 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.944730997 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.944813013 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.944813013 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.946468115 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.946525097 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.946568966 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.946576118 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:08:59.946621895 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:08:59.946623087 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.062618971 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.062666893 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.063085079 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.063085079 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.063101053 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.063141108 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.180428028 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.180489063 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.182388067 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.182415009 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.182533026 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.754792929 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.754836082 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.754878998 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.754928112 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.754956007 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.754990101 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.754993916 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.755018950 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.755024910 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.755045891 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.755048990 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.755069971 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.755074978 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.755100965 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.755134106 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.755615950 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.755686998 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.755691051 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.755734921 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.755780935 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.755861998 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.767775059 CEST	61503	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.767796040 CEST	443	61503	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.862356901 CEST	61504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.862399101 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.862474918 CEST	61504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.864172935 CEST	61505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.864221096 CEST	443	61505	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.864276886 CEST	61505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.865819931 CEST	61506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.865830898 CEST	443	61506	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.866065025 CEST	61506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.867409945 CEST	61507	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.867422104 CEST	443	61507	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.867475033 CEST	61507	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.867650986 CEST	61504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.867662907 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.868042946 CEST	61507	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.868063927 CEST	443	61507	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.869184017 CEST	61508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.869239092 CEST	443	61508	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.869288921 CEST	61508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.869347095 CEST	61505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.869362116 CEST	443	61505	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.869705915 CEST	61506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.869714975 CEST	443	61506	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:00.869918108 CEST	61508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:00.869940042 CEST	443	61508	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.624078989 CEST	443	61507	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.624799967 CEST	61507	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:01.624847889 CEST	443	61507	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.625380993 CEST	61507	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:01.625407934 CEST	443	61507	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.628475904 CEST	443	61508	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.628869057 CEST	61508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:01.628885984 CEST	443	61508	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.629327059 CEST	61508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:01.629333019 CEST	443	61508	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.631853104 CEST	443	61505	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.632239103 CEST	61505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:01.632271051 CEST	443	61505	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.632765055 CEST	61505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:01.632792950 CEST	443	61505	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.636460066 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.636790991 CEST	61504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:01.636815071 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.637228966 CEST	61504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:01.637234926 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.639966965 CEST	443	61506	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.640264988 CEST	61506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:01.640275002 CEST	443	61506	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:01.640722990 CEST	61506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:01.640727043 CEST	443	61506	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.765887976 CEST	443	61505	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.765908957 CEST	443	61505	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.765964031 CEST	443	61505	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.765997887 CEST	61505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.766016960 CEST	443	61507	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766052008 CEST	443	61508	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766062975 CEST	61505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.766118050 CEST	443	61508	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766181946 CEST	443	61507	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766261101 CEST	443	61508	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766345978 CEST	61507	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.766347885 CEST	61508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.766347885 CEST	61508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.766354084 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766411066 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766506910 CEST	61505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.766516924 CEST	61504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.766529083 CEST	443	61505	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766541004 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766555071 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766566992 CEST	61505	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.766570091 CEST	443	61506	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766575098 CEST	443	61505	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766724110 CEST	443	61506	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.766746044 CEST	61504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.766748905 CEST	61507	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.766755104 CEST	443	61507	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.767335892 CEST	61506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.767925024 CEST	61504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.767940044 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.767956018 CEST	61504	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.767956018 CEST	61506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.767962933 CEST	443	61504	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.767971039 CEST	443	61506	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.768404007 CEST	61506	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.768409014 CEST	443	61506	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.769062996 CEST	61508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.769062996 CEST	61508	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.769083977 CEST	443	61508	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.769098043 CEST	443	61508	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.771606922 CEST	61509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.771698952 CEST	443	61509	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.771747112 CEST	61510	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.771784067 CEST	443	61510	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.771914005 CEST	61509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.771967888 CEST	61510	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.772897005 CEST	61511	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.772922039 CEST	443	61511	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.773108006 CEST	61511	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.773121119 CEST	61512	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.773205996 CEST	443	61512	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.773307085 CEST	61509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.773308992 CEST	61512	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.773343086 CEST	443	61509	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.773418903 CEST	61512	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.773442030 CEST	443	61512	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.773623943 CEST	61510	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.773646116 CEST	443	61510	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.774341106 CEST	61511	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.774343967 CEST	61513	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.774369955 CEST	443	61511	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.774425983 CEST	443	61513	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:02.774619102 CEST	61513	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.774682999 CEST	61513	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:02.774708033 CEST	443	61513	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.833112001 CEST	443	61510	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.833791971 CEST	61510	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.833811998 CEST	443	61510	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.834295034 CEST	61510	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.834300041 CEST	443	61510	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.840020895 CEST	443	61511	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.840492010 CEST	61511	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.840523958 CEST	443	61511	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.841085911 CEST	61511	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.841093063 CEST	443	61511	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.851551056 CEST	443	61509	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.852340937 CEST	61509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.852363110 CEST	443	61509	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.853039980 CEST	61509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.853048086 CEST	443	61509	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.854197025 CEST	443	61513	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.854827881 CEST	61513	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.854857922 CEST	443	61513	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.855633020 CEST	61513	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.855639935 CEST	443	61513	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.861248016 CEST	443	61512	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.861715078 CEST	61512	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.861769915 CEST	443	61512	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.862276077 CEST	61512	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.862289906 CEST	443	61512	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.972820997 CEST	443	61510	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.972878933 CEST	443	61510	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.973001003 CEST	61510	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.973162889 CEST	61510	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.973179102 CEST	443	61510	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.973191977 CEST	61510	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.973196983 CEST	443	61510	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.977061033 CEST	61515	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.977125883 CEST	443	61515	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.977241993 CEST	61515	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.977421999 CEST	61515	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.977459908 CEST	443	61515	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.977667093 CEST	443	61511	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.977823019 CEST	443	61511	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.977901936 CEST	61511	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.977977037 CEST	61511	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.978019953 CEST	443	61511	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.978051901 CEST	61511	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.978068113 CEST	443	61511	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.980865955 CEST	61516	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.980906010 CEST	443	61516	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.980962992 CEST	61516	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.981122971 CEST	61516	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.981134892 CEST	443	61516	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.990962982 CEST	443	61509	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.991120100 CEST	443	61509	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.991211891 CEST	61509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.991213083 CEST	61509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.991250992 CEST	61509	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.991259098 CEST	443	61509	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.993031025 CEST	443	61513	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.993195057 CEST	443	61513	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.993267059 CEST	61513	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.993383884 CEST	61513	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.993412971 CEST	443	61513	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.993439913 CEST	61513	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.993453026 CEST	443	61513	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.993916988 CEST	61517	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.993947983 CEST	443	61517	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.994028091 CEST	61517	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.994164944 CEST	61517	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.994184017 CEST	443	61517	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.996052980 CEST	61518	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.996062040 CEST	443	61518	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:03.996119976 CEST	61518	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.996239901 CEST	61518	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:03.996256113 CEST	443	61518	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.000704050 CEST	443	61512	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.000864029 CEST	443	61512	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.000925064 CEST	61512	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.000996113 CEST	61512	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.001039028 CEST	443	61512	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.001066923 CEST	61512	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.001081944 CEST	443	61512	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.003267050 CEST	61519	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.003279924 CEST	443	61519	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.003343105 CEST	61519	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.003449917 CEST	61519	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.003460884 CEST	443	61519	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.744123936 CEST	443	61515	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.745548010 CEST	61515	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.745548010 CEST	61515	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.745644093 CEST	443	61515	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.745697021 CEST	443	61515	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.746969938 CEST	443	61516	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.747880936 CEST	61516	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.747880936 CEST	61516	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.747895002 CEST	443	61516	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.747908115 CEST	443	61516	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.748758078 CEST	443	61517	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.749135971 CEST	61517	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.749165058 CEST	443	61517	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.749560118 CEST	61517	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.749567986 CEST	443	61517	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.881547928 CEST	443	61516	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.882369041 CEST	443	61516	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.882682085 CEST	61516	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.882682085 CEST	61516	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.882711887 CEST	61516	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.882721901 CEST	443	61516	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.883019924 CEST	443	61517	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.883157015 CEST	443	61515	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.883214951 CEST	443	61517	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.883336067 CEST	61517	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.883364916 CEST	443	61515	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.883595943 CEST	61515	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.884439945 CEST	61515	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.884463072 CEST	443	61515	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.884502888 CEST	61515	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.884510994 CEST	443	61515	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.885824919 CEST	61517	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.885843992 CEST	443	61517	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.885894060 CEST	61517	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.885900974 CEST	443	61517	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.889513969 CEST	61520	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.889558077 CEST	443	61520	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.891047955 CEST	61521	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.891128063 CEST	443	61521	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.891206980 CEST	61520	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.891433001 CEST	61521	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.891756058 CEST	61522	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.891783953 CEST	443	61522	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.891973972 CEST	61520	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.891993046 CEST	443	61520	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.892030954 CEST	61522	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.892169952 CEST	61521	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.892206907 CEST	443	61521	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:04.892347097 CEST	61522	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:04.892364025 CEST	443	61522	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.122652054 CEST	443	61518	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.123819113 CEST	61518	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.123819113 CEST	61518	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.123845100 CEST	443	61518	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.123852968 CEST	443	61518	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.261780024 CEST	443	61518	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.261948109 CEST	443	61518	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.262124062 CEST	61518	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.262124062 CEST	61518	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.262175083 CEST	61518	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.262191057 CEST	443	61518	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.265522957 CEST	61523	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.265614986 CEST	443	61523	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.265887976 CEST	61523	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.265888929 CEST	61523	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.265975952 CEST	443	61523	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.345650911 CEST	443	61519	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.346987009 CEST	61519	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.346987009 CEST	61519	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.347068071 CEST	443	61519	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.347105980 CEST	443	61519	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.481216908 CEST	443	61519	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.481447935 CEST	443	61519	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.481560946 CEST	61519	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.481882095 CEST	61519	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.481882095 CEST	61519	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.481947899 CEST	443	61519	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.481988907 CEST	443	61519	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.485114098 CEST	61524	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.485197067 CEST	443	61524	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.485584021 CEST	61524	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.485584021 CEST	61524	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.485712051 CEST	443	61524	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.671926022 CEST	443	61520	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.673331976 CEST	61520	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.673331976 CEST	61520	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.673396111 CEST	443	61520	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.673450947 CEST	443	61520	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.673468113 CEST	443	61522	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.674298048 CEST	61522	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.674298048 CEST	61522	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.674319983 CEST	443	61522	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.674356937 CEST	443	61522	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.677515984 CEST	443	61521	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.677896023 CEST	61521	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.677968979 CEST	443	61521	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.678436041 CEST	61521	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.678462982 CEST	443	61521	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.809952974 CEST	443	61520	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.810683012 CEST	443	61520	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.810923100 CEST	61520	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.810923100 CEST	61520	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.810924053 CEST	61520	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.813065052 CEST	443	61522	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.813152075 CEST	443	61522	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.813220978 CEST	61522	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.813345909 CEST	61522	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.813386917 CEST	443	61522	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.813416958 CEST	61522	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.813433886 CEST	443	61522	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.813874006 CEST	61525	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.813961029 CEST	443	61525	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.814043045 CEST	61525	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.814199924 CEST	61525	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.814232111 CEST	443	61525	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.816046953 CEST	443	61521	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.816091061 CEST	443	61521	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.816190958 CEST	61521	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.816266060 CEST	61526	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.816307068 CEST	443	61526	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.816329002 CEST	61521	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.816329002 CEST	61521	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.816371918 CEST	443	61521	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.816396952 CEST	61526	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.816397905 CEST	443	61521	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.816560030 CEST	61526	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.816580057 CEST	443	61526	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.819303989 CEST	61527	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.819344044 CEST	443	61527	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:05.819407940 CEST	61527	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.819520950 CEST	61527	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:05.819544077 CEST	443	61527	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:06.024669886 CEST	443	61523	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:06.025306940 CEST	61523	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:06.025337934 CEST	443	61523	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:06.025913954 CEST	61523	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:06.025919914 CEST	443	61523	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:06.054225922 CEST	61528	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:09:06.054264069 CEST	443	61528	142.250.186.132	192.168.2.4
Oct 23, 2024 23:09:06.054322004 CEST	61528	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:09:06.054682970 CEST	61528	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:09:06.054697990 CEST	443	61528	142.250.186.132	192.168.2.4
Oct 23, 2024 23:09:06.114779949 CEST	61520	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:06.114845991 CEST	443	61520	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.138216019 CEST	443	61523	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.138390064 CEST	443	61523	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.140678883 CEST	61523	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.140680075 CEST	61523	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.140789032 CEST	61523	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.140827894 CEST	443	61523	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.142122030 CEST	443	61528	142.250.186.132	192.168.2.4
Oct 23, 2024 23:09:07.143064022 CEST	61528	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:09:07.143125057 CEST	443	61528	142.250.186.132	192.168.2.4
Oct 23, 2024 23:09:07.143475056 CEST	443	61528	142.250.186.132	192.168.2.4
Oct 23, 2024 23:09:07.144252062 CEST	61529	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.144289017 CEST	443	61529	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.144793034 CEST	61528	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:09:07.144865036 CEST	443	61528	142.250.186.132	192.168.2.4
Oct 23, 2024 23:09:07.144912004 CEST	61529	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.145144939 CEST	61529	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.145152092 CEST	443	61529	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.194339991 CEST	61528	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:09:07.304802895 CEST	443	61526	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.307272911 CEST	61526	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.307360888 CEST	443	61526	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.308222055 CEST	61526	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.308274984 CEST	443	61526	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.308763981 CEST	443	61524	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.309081078 CEST	443	61527	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.309298992 CEST	61524	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.309323072 CEST	443	61524	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.310098886 CEST	443	61525	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.310539007 CEST	61524	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.310549021 CEST	443	61524	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.310940981 CEST	61525	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.310971022 CEST	443	61525	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.314289093 CEST	61525	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.314294100 CEST	443	61525	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.314594984 CEST	61527	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.314604044 CEST	443	61527	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.315026999 CEST	61527	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.315031052 CEST	443	61527	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.445790052 CEST	443	61526	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.446304083 CEST	443	61526	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.446491957 CEST	61526	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.446491957 CEST	61526	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.446491957 CEST	61526	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.446671963 CEST	443	61524	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.447536945 CEST	443	61524	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.449577093 CEST	61530	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.449621916 CEST	443	61530	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.449692011 CEST	61524	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.449692965 CEST	61524	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.449692965 CEST	61524	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.449882030 CEST	61530	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.450335979 CEST	443	61525	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.450371027 CEST	61530	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.450371981 CEST	443	61527	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.450396061 CEST	443	61530	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.450417995 CEST	443	61525	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.450520039 CEST	443	61527	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.450551987 CEST	61525	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.450592995 CEST	61527	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.450750113 CEST	61525	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.450750113 CEST	61525	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.450767040 CEST	443	61525	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.450777054 CEST	443	61525	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.450783968 CEST	61527	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.450788021 CEST	443	61527	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.450797081 CEST	61527	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.450803041 CEST	443	61527	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.453357935 CEST	61532	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.453388929 CEST	61531	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.453427076 CEST	443	61531	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.453439951 CEST	443	61532	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.453516960 CEST	61531	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.453520060 CEST	61533	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.453525066 CEST	61532	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.453541994 CEST	443	61533	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.453742027 CEST	61533	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.453756094 CEST	61531	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.453768015 CEST	443	61531	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.453871012 CEST	61532	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.453941107 CEST	61533	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.453948021 CEST	443	61533	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.453952074 CEST	443	61532	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.663640022 CEST	61524	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.663676023 CEST	443	61524	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:07.669833899 CEST	61526	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:07.669862986 CEST	443	61526	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.543450117 CEST	443	61529	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.544550896 CEST	61529	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.544550896 CEST	61529	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.544586897 CEST	443	61529	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.544595957 CEST	443	61529	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.547128916 CEST	443	61530	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.547745943 CEST	443	61532	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.547806978 CEST	61530	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.547853947 CEST	443	61530	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.547893047 CEST	61530	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.547904015 CEST	443	61530	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.548340082 CEST	61532	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.548440933 CEST	443	61532	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.548784971 CEST	61532	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.548837900 CEST	443	61532	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.550559998 CEST	443	61531	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.550909996 CEST	61531	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.550926924 CEST	443	61531	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.551359892 CEST	61531	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.551363945 CEST	443	61531	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.561311007 CEST	443	61533	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.561687946 CEST	61533	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.561712980 CEST	443	61533	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.562117100 CEST	61533	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.562120914 CEST	443	61533	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.677933931 CEST	443	61529	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.678188086 CEST	443	61529	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.678263903 CEST	61529	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.681390047 CEST	61529	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.681416988 CEST	443	61529	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.681433916 CEST	61529	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.681443930 CEST	443	61529	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.681794882 CEST	443	61532	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.682307959 CEST	443	61532	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.683804989 CEST	61532	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.684374094 CEST	61532	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.684448004 CEST	443	61532	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.684489965 CEST	61532	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.684508085 CEST	443	61532	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.686392069 CEST	61534	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.686480045 CEST	443	61534	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.686882973 CEST	61534	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.687268972 CEST	443	61530	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.687371969 CEST	443	61530	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.687486887 CEST	61530	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.688000917 CEST	443	61531	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.688169956 CEST	61535	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.688204050 CEST	443	61535	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.688325882 CEST	61535	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.688519955 CEST	61534	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.688570976 CEST	443	61534	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.688680887 CEST	443	61531	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.688769102 CEST	61531	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.688972950 CEST	61535	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.688977957 CEST	61530	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.688985109 CEST	443	61535	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.689016104 CEST	443	61530	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.689039946 CEST	61530	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.689050913 CEST	443	61530	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.691390038 CEST	61536	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.691415071 CEST	61531	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.691415071 CEST	61531	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.691431046 CEST	443	61531	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.691441059 CEST	443	61531	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.691473961 CEST	443	61536	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.691596031 CEST	61536	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.692694902 CEST	61536	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.692795038 CEST	443	61536	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.700994968 CEST	443	61533	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.701155901 CEST	443	61533	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.702460051 CEST	61533	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.702714920 CEST	61533	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.702714920 CEST	61533	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.702734947 CEST	443	61533	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.702744961 CEST	443	61533	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.706084013 CEST	61537	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.706142902 CEST	443	61537	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.706402063 CEST	61537	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.706969976 CEST	61538	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.707020998 CEST	61537	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.707051039 CEST	443	61538	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.707060099 CEST	443	61537	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:09.707166910 CEST	61538	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.707492113 CEST	61538	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:09.707529068 CEST	443	61538	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.448290110 CEST	443	61536	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.449681044 CEST	61536	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.449717045 CEST	443	61536	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.450335026 CEST	61536	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.450349092 CEST	443	61536	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.455450058 CEST	443	61535	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.456255913 CEST	61535	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.456276894 CEST	443	61535	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.457285881 CEST	61535	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.457292080 CEST	443	61535	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.457392931 CEST	443	61534	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.458225965 CEST	61534	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.458288908 CEST	443	61534	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.459830999 CEST	61534	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.459846020 CEST	443	61534	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.487631083 CEST	443	61537	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.489038944 CEST	61537	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.489056110 CEST	443	61537	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.490431070 CEST	61537	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.490438938 CEST	443	61537	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.500051975 CEST	443	61538	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.501070023 CEST	61538	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.501091957 CEST	443	61538	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.501816988 CEST	61538	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.501827002 CEST	443	61538	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.582048893 CEST	443	61536	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.582200050 CEST	443	61536	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.582284927 CEST	61536	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.582637072 CEST	61536	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.582637072 CEST	61536	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.582683086 CEST	443	61536	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.582725048 CEST	443	61536	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.589437008 CEST	61539	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.589481115 CEST	443	61539	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.589580059 CEST	61539	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.589708090 CEST	61539	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.589720011 CEST	443	61539	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.594388962 CEST	443	61535	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.594541073 CEST	443	61535	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.594645023 CEST	61535	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.594791889 CEST	61535	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.594808102 CEST	443	61535	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.594818115 CEST	61535	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.594824076 CEST	443	61535	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.596009016 CEST	443	61534	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.596671104 CEST	443	61534	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.596734047 CEST	61534	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.596915007 CEST	61534	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.596962929 CEST	443	61534	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.596992970 CEST	61534	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.597008944 CEST	443	61534	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.602380037 CEST	61540	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.602466106 CEST	443	61540	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.602632046 CEST	61540	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.603801012 CEST	61541	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.603888988 CEST	443	61541	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.604022980 CEST	61540	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.604060888 CEST	443	61540	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.604067087 CEST	61541	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.604377985 CEST	61541	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.604417086 CEST	443	61541	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.628187895 CEST	443	61537	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.629014969 CEST	443	61537	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.629070044 CEST	61537	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.629093885 CEST	61537	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.629106045 CEST	443	61537	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.634975910 CEST	61542	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.635000944 CEST	443	61542	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.635092020 CEST	61542	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.635386944 CEST	61542	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.635402918 CEST	443	61542	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.638102055 CEST	443	61538	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.638248920 CEST	443	61538	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.638310909 CEST	61538	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.638473034 CEST	61538	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.638494968 CEST	443	61538	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.638520956 CEST	61538	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.638534069 CEST	443	61538	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.640989065 CEST	61543	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.641032934 CEST	443	61543	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:10.641136885 CEST	61543	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.641287088 CEST	61543	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:10.641303062 CEST	443	61543	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.339272976 CEST	443	61539	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.339828014 CEST	61539	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.339891911 CEST	443	61539	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.340370893 CEST	61539	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.340389013 CEST	443	61539	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.363631010 CEST	443	61541	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.364053965 CEST	61541	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.364092112 CEST	443	61541	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.364455938 CEST	61541	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.364468098 CEST	443	61541	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.372862101 CEST	443	61540	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.373367071 CEST	61540	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.373430967 CEST	443	61540	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.373594046 CEST	61540	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.373609066 CEST	443	61540	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.395533085 CEST	443	61542	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.395998001 CEST	61542	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.396085024 CEST	443	61542	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.396460056 CEST	61542	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.396512032 CEST	443	61542	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.433100939 CEST	443	61543	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.435106993 CEST	61543	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.435138941 CEST	443	61543	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.435499907 CEST	61543	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.435508013 CEST	443	61543	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.476121902 CEST	443	61539	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.476280928 CEST	443	61539	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.476455927 CEST	61539	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.476457119 CEST	61539	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.476457119 CEST	61539	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.479511023 CEST	61544	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.479559898 CEST	443	61544	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.479639053 CEST	61544	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.479815960 CEST	61544	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.479835987 CEST	443	61544	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.502603054 CEST	443	61541	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.502680063 CEST	443	61541	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.502748013 CEST	61541	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.502813101 CEST	61541	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.502830029 CEST	443	61541	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.502839088 CEST	61541	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.502842903 CEST	443	61541	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.505496979 CEST	61545	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.505537987 CEST	443	61545	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.505635977 CEST	61545	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.505758047 CEST	61545	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.505770922 CEST	443	61545	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.513351917 CEST	443	61540	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.513515949 CEST	443	61540	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.513710976 CEST	61540	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.513710976 CEST	61540	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.513710976 CEST	61540	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.515665054 CEST	61546	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.515700102 CEST	443	61546	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.515798092 CEST	61546	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.515940905 CEST	61546	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.515961885 CEST	443	61546	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.531964064 CEST	443	61542	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.532272100 CEST	443	61542	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.532485962 CEST	61542	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.532486916 CEST	61542	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.532486916 CEST	61542	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.534322977 CEST	61547	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.534353971 CEST	443	61547	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.534584999 CEST	61547	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.534749985 CEST	61547	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.534759045 CEST	443	61547	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.573700905 CEST	443	61543	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.573885918 CEST	443	61543	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.573945045 CEST	61543	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.573983908 CEST	61543	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.573983908 CEST	61543	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.574001074 CEST	443	61543	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.574012041 CEST	443	61543	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.576122999 CEST	61548	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.576170921 CEST	443	61548	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.576253891 CEST	61548	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.576348066 CEST	61548	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.576359987 CEST	443	61548	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.786956072 CEST	61539	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.787030935 CEST	443	61539	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.818363905 CEST	61540	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.818442106 CEST	443	61540	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:11.833848000 CEST	61542	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:11.833910942 CEST	443	61542	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.360598087 CEST	443	61545	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.361639977 CEST	61545	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.361665010 CEST	443	61545	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.362370014 CEST	443	61546	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.363401890 CEST	61545	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.363415003 CEST	443	61545	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.364681959 CEST	443	61544	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.364840984 CEST	61546	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.364876032 CEST	443	61546	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.365364075 CEST	61546	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.365371943 CEST	443	61546	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.367257118 CEST	61544	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.367275000 CEST	443	61544	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.370223045 CEST	61544	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.370229006 CEST	443	61544	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.695518970 CEST	443	61544	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.695602894 CEST	443	61544	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.695657015 CEST	443	61545	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.695693016 CEST	443	61546	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.695736885 CEST	443	61545	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.695743084 CEST	61544	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.695821047 CEST	61545	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.695888996 CEST	443	61546	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.695939064 CEST	61546	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.696332932 CEST	61544	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.696355104 CEST	443	61544	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.697874069 CEST	61546	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.697892904 CEST	443	61546	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.699743032 CEST	61545	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.699743032 CEST	61545	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.699762106 CEST	443	61545	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.699773073 CEST	443	61545	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.702867985 CEST	443	61547	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.703284025 CEST	443	61548	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.707370043 CEST	61550	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.707433939 CEST	61549	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.707461119 CEST	443	61550	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.707479000 CEST	443	61549	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.707555056 CEST	61550	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.707602978 CEST	61549	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.708632946 CEST	61551	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.708646059 CEST	443	61551	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.708811045 CEST	61551	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.709150076 CEST	61548	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.709170103 CEST	443	61548	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.710391045 CEST	61548	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.710397959 CEST	443	61548	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.710905075 CEST	61551	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.710925102 CEST	443	61551	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.711119890 CEST	61549	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.711133003 CEST	443	61549	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.711735964 CEST	61547	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.711745977 CEST	443	61547	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.712649107 CEST	61547	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.712654114 CEST	443	61547	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.712971926 CEST	61550	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.712985992 CEST	443	61550	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.845568895 CEST	443	61548	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.845820904 CEST	443	61548	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.846029043 CEST	61548	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.846029997 CEST	61548	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.846029997 CEST	61548	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.848284960 CEST	443	61547	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.848517895 CEST	443	61547	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.848596096 CEST	61547	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.848723888 CEST	61547	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.848736048 CEST	443	61547	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.848841906 CEST	61547	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.848848104 CEST	443	61547	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.848984957 CEST	61552	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.849009991 CEST	443	61552	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.849328041 CEST	61552	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.849436045 CEST	61552	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.849447966 CEST	443	61552	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.851231098 CEST	61553	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.851269960 CEST	443	61553	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:12.851432085 CEST	61553	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.851591110 CEST	61553	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:12.851608038 CEST	443	61553	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.146224022 CEST	61548	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.146266937 CEST	443	61548	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.462065935 CEST	443	61550	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.463099003 CEST	61550	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.463165998 CEST	443	61550	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.464010954 CEST	61550	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.464027882 CEST	443	61550	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.464507103 CEST	443	61551	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.465140104 CEST	61551	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.465161085 CEST	443	61551	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.465867996 CEST	61551	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.465873957 CEST	443	61551	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.472223997 CEST	443	61549	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.473161936 CEST	61549	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.473174095 CEST	443	61549	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.474132061 CEST	61549	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.474144936 CEST	443	61549	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.595029116 CEST	443	61552	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.596436024 CEST	61552	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.596461058 CEST	443	61552	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.597707987 CEST	443	61550	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.597848892 CEST	443	61550	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.597925901 CEST	61552	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.597934961 CEST	61550	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.597945929 CEST	443	61552	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.598134995 CEST	443	61551	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.598294973 CEST	443	61551	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.598344088 CEST	61551	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.598858118 CEST	61551	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.598880053 CEST	443	61551	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.599932909 CEST	61550	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.599932909 CEST	61550	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.599958897 CEST	443	61550	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.599972963 CEST	443	61550	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.607449055 CEST	443	61549	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.607580900 CEST	443	61549	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.607640028 CEST	61549	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.608282089 CEST	61549	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.608297110 CEST	443	61549	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.616234064 CEST	61554	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.616260052 CEST	443	61554	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.616331100 CEST	61554	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.617319107 CEST	61555	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.617368937 CEST	443	61555	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.617573977 CEST	61555	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.621126890 CEST	61556	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.621155977 CEST	443	61556	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.621227026 CEST	61556	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.621388912 CEST	61556	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.621402979 CEST	443	61556	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.621505976 CEST	61554	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.621517897 CEST	443	61554	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.621620893 CEST	61555	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.621644020 CEST	443	61555	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.628201962 CEST	443	61553	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.628901958 CEST	61553	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.628961086 CEST	443	61553	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.629767895 CEST	61553	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.629781008 CEST	443	61553	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.731991053 CEST	443	61552	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.732084036 CEST	443	61552	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.732156992 CEST	61552	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.732527971 CEST	61552	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.732539892 CEST	443	61552	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.732568026 CEST	61552	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.732572079 CEST	443	61552	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.735656023 CEST	61557	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.735749006 CEST	443	61557	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.735826969 CEST	61557	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.736010075 CEST	61557	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.736037016 CEST	443	61557	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.764373064 CEST	443	61553	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.764460087 CEST	443	61553	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.764648914 CEST	61553	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.764874935 CEST	61553	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.764913082 CEST	443	61553	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.764935970 CEST	61553	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.764944077 CEST	443	61553	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.767836094 CEST	61558	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.767874002 CEST	443	61558	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:13.767930031 CEST	61558	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.768404007 CEST	61558	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:13.768420935 CEST	443	61558	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.364571095 CEST	443	61554	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.366590023 CEST	61554	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.366622925 CEST	443	61554	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.368460894 CEST	61554	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.368468046 CEST	443	61554	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.379775047 CEST	443	61556	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.380811930 CEST	61556	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.380825996 CEST	443	61556	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.382432938 CEST	61556	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.382446051 CEST	443	61556	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.399576902 CEST	443	61555	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.401710987 CEST	61555	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.401777029 CEST	443	61555	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.402419090 CEST	61555	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.402472019 CEST	443	61555	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.500499010 CEST	443	61554	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.500919104 CEST	443	61554	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.500993013 CEST	61554	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.505917072 CEST	443	61557	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.514484882 CEST	443	61558	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.518330097 CEST	61554	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.518353939 CEST	443	61554	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.518834114 CEST	443	61556	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.518969059 CEST	443	61556	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.519083023 CEST	61556	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.519797087 CEST	61556	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.519818068 CEST	443	61556	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.519828081 CEST	61556	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.519833088 CEST	443	61556	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.521121025 CEST	61557	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.521153927 CEST	443	61557	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.522670031 CEST	61557	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.522696018 CEST	443	61557	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.524475098 CEST	61558	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.524482965 CEST	443	61558	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.525778055 CEST	61558	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.525782108 CEST	443	61558	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.530767918 CEST	61559	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.530813932 CEST	443	61559	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.531032085 CEST	61559	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.531164885 CEST	61559	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.531184912 CEST	443	61559	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.532229900 CEST	61560	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.532263994 CEST	443	61560	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.532339096 CEST	61560	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.532471895 CEST	61560	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.532490015 CEST	443	61560	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.539175034 CEST	443	61555	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.539343119 CEST	443	61555	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.539643049 CEST	61555	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.539644003 CEST	61555	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.539644003 CEST	61555	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.541230917 CEST	61561	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.541316032 CEST	443	61561	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.541479111 CEST	61561	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.541583061 CEST	61561	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.541609049 CEST	443	61561	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.657367945 CEST	443	61558	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.657551050 CEST	443	61558	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.657661915 CEST	61558	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.657661915 CEST	61558	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.657720089 CEST	61558	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.657730103 CEST	443	61558	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.658720970 CEST	443	61557	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.658863068 CEST	443	61557	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.659172058 CEST	61557	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.659212112 CEST	61557	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.659212112 CEST	61557	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.659234047 CEST	443	61557	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.659249067 CEST	443	61557	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.660860062 CEST	61562	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.660918951 CEST	443	61562	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.661185026 CEST	61563	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.661191940 CEST	61562	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.661191940 CEST	61562	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.661266088 CEST	443	61563	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.661351919 CEST	443	61562	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.661376953 CEST	61563	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.661578894 CEST	61563	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.661608934 CEST	443	61563	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:14.849371910 CEST	61555	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:14.849433899 CEST	443	61555	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.295785904 CEST	443	61561	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.296359062 CEST	61561	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.296426058 CEST	443	61561	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.296924114 CEST	61561	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.296976089 CEST	443	61561	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.298746109 CEST	443	61560	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.299072981 CEST	61560	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.299097061 CEST	443	61560	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.299453020 CEST	61560	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.299462080 CEST	443	61560	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.300282955 CEST	443	61559	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.300663948 CEST	61559	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.300698042 CEST	443	61559	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.300971031 CEST	61559	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.300996065 CEST	443	61559	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.740359068 CEST	443	61561	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.740473032 CEST	443	61561	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.740524054 CEST	443	61559	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.740546942 CEST	443	61560	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.740673065 CEST	443	61559	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.740693092 CEST	443	61560	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.740725040 CEST	61561	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.740760088 CEST	61559	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.740761042 CEST	61559	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.740768909 CEST	61560	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.740804911 CEST	61559	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.740825891 CEST	443	61559	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.741079092 CEST	61561	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.741079092 CEST	61561	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.741143942 CEST	443	61561	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.741178989 CEST	443	61561	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.741811037 CEST	61560	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.741827965 CEST	443	61560	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.741856098 CEST	61560	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.741863012 CEST	443	61560	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.742896080 CEST	443	61563	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.743330002 CEST	443	61562	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.744868994 CEST	61564	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.744908094 CEST	443	61564	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.744949102 CEST	61565	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.744957924 CEST	61564	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.745034933 CEST	443	61565	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.745050907 CEST	61563	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.745120049 CEST	61565	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.745137930 CEST	443	61563	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.745532036 CEST	61563	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.745585918 CEST	443	61563	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.745614052 CEST	61565	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.745693922 CEST	443	61565	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.745812893 CEST	61562	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.745826006 CEST	443	61562	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.746079922 CEST	61566	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.746092081 CEST	443	61566	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.746222019 CEST	61566	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.746300936 CEST	61562	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.746306896 CEST	443	61562	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.746391058 CEST	61564	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.746403933 CEST	443	61564	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.746552944 CEST	61566	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.746561050 CEST	443	61566	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.885993958 CEST	443	61563	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.886162996 CEST	443	61563	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.886364937 CEST	61563	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.886449099 CEST	61563	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.886492968 CEST	443	61563	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.886531115 CEST	61563	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.886581898 CEST	443	61563	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.889664888 CEST	443	61562	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.889766932 CEST	443	61562	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.889972925 CEST	61562	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.890494108 CEST	61567	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.890580893 CEST	443	61567	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.890651941 CEST	61567	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.890774965 CEST	61562	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.890796900 CEST	443	61562	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.890815020 CEST	61562	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.890821934 CEST	443	61562	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.893301964 CEST	61567	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.893385887 CEST	443	61567	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.895138979 CEST	61568	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.895160913 CEST	443	61568	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:15.895226002 CEST	61568	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.895400047 CEST	61568	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:15.895411015 CEST	443	61568	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.494259119 CEST	443	61564	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.494930983 CEST	61564	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.494955063 CEST	443	61564	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.495493889 CEST	61564	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.495500088 CEST	443	61564	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.517380953 CEST	443	61566	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.517827034 CEST	61566	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.517848969 CEST	443	61566	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.518407106 CEST	61566	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.518412113 CEST	443	61566	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.522006035 CEST	443	61565	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.522373915 CEST	61565	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.522439003 CEST	443	61565	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.522773027 CEST	61565	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.522787094 CEST	443	61565	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.631534100 CEST	443	61564	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.631582975 CEST	443	61564	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.631683111 CEST	61564	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.631927967 CEST	61564	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.631946087 CEST	443	61564	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.631958008 CEST	61564	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.631963015 CEST	443	61564	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.635375977 CEST	61569	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.635467052 CEST	443	61569	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.635570049 CEST	61569	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.635751009 CEST	61569	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.635782003 CEST	443	61569	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.655246973 CEST	443	61566	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.655369043 CEST	443	61566	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.655420065 CEST	61566	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.655467033 CEST	61566	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.655478001 CEST	443	61566	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.655487061 CEST	61566	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.655492067 CEST	443	61566	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.657727003 CEST	61570	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.657768011 CEST	443	61570	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.658006907 CEST	61570	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.658080101 CEST	61570	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.658097982 CEST	443	61570	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.661411047 CEST	443	61567	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.661890984 CEST	61567	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.662004948 CEST	443	61567	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.662534952 CEST	61567	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.662585974 CEST	443	61567	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.662767887 CEST	443	61565	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.662905931 CEST	443	61565	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.663105965 CEST	61565	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.663235903 CEST	61565	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.663235903 CEST	61565	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.663279057 CEST	443	61565	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.663291931 CEST	443	61565	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.665524960 CEST	61571	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.665580988 CEST	443	61571	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.665781975 CEST	61571	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.665920019 CEST	61571	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.665949106 CEST	443	61571	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.666837931 CEST	443	61568	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.667556047 CEST	61568	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.667593002 CEST	443	61568	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.668008089 CEST	61568	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.668015003 CEST	443	61568	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.797665119 CEST	443	61567	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.797806978 CEST	443	61567	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.798083067 CEST	61567	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.798190117 CEST	61567	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.798190117 CEST	61567	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.798248053 CEST	443	61567	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.798286915 CEST	443	61567	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.801142931 CEST	61572	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.801184893 CEST	443	61572	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.801565886 CEST	61572	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.801565886 CEST	61572	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.801599026 CEST	443	61572	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.803503990 CEST	443	61568	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.803664923 CEST	443	61568	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.803847075 CEST	61568	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.803890944 CEST	61568	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.803890944 CEST	61568	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.803915024 CEST	443	61568	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.803929090 CEST	443	61568	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.806003094 CEST	61573	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.806066036 CEST	443	61573	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:16.806273937 CEST	61573	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.806273937 CEST	61573	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:16.806351900 CEST	443	61573	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.221296072 CEST	443	61528	142.250.186.132	192.168.2.4
Oct 23, 2024 23:09:17.221432924 CEST	443	61528	142.250.186.132	192.168.2.4
Oct 23, 2024 23:09:17.221590042 CEST	61528	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:09:17.392998934 CEST	443	61569	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.394159079 CEST	61569	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.394159079 CEST	61569	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.394198895 CEST	443	61569	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.394216061 CEST	443	61569	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.431935072 CEST	443	61570	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.432662964 CEST	61570	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.432662964 CEST	61570	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.432693958 CEST	443	61570	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.432720900 CEST	443	61570	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.434685946 CEST	443	61571	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.435412884 CEST	61571	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.435412884 CEST	61571	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.435477972 CEST	443	61571	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.435532093 CEST	443	61571	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.527565002 CEST	443	61569	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.527668953 CEST	443	61569	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.527976990 CEST	61569	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.527976990 CEST	61569	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.527976990 CEST	61569	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.530590057 CEST	61574	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.530625105 CEST	443	61574	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.530730009 CEST	61574	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.530858994 CEST	61574	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.530865908 CEST	443	61574	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.557938099 CEST	443	61572	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.558480024 CEST	61572	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.558492899 CEST	443	61572	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.558799982 CEST	61572	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.558804989 CEST	443	61572	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.573477030 CEST	443	61571	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.574212074 CEST	443	61571	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.574309111 CEST	61571	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.574309111 CEST	61571	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.574646950 CEST	61571	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.574712038 CEST	443	61571	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.575246096 CEST	443	61570	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.575299025 CEST	443	61570	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.575625896 CEST	61570	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.575625896 CEST	61570	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.575627089 CEST	61570	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.577184916 CEST	61575	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.577269077 CEST	61576	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.577300072 CEST	443	61576	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.577305079 CEST	443	61575	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.577383041 CEST	61576	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.577402115 CEST	61575	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.577514887 CEST	61575	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.577558041 CEST	443	61575	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.577605963 CEST	61576	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.577619076 CEST	443	61576	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.587423086 CEST	443	61573	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.588206053 CEST	61573	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.588207006 CEST	61573	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.588265896 CEST	443	61573	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.588361025 CEST	443	61573	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.696609020 CEST	443	61572	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.697082043 CEST	443	61572	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.697150946 CEST	61572	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.697186947 CEST	61572	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.697186947 CEST	61572	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.697205067 CEST	443	61572	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.697211981 CEST	443	61572	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.699976921 CEST	61577	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.700062037 CEST	443	61577	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.700357914 CEST	61577	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.700357914 CEST	61577	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.700479031 CEST	443	61577	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.726835966 CEST	443	61573	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.727571964 CEST	443	61573	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.727694035 CEST	61573	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.727694035 CEST	61573	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.727780104 CEST	61573	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.727838993 CEST	443	61573	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.729769945 CEST	61578	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.729804993 CEST	443	61578	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.729933977 CEST	61578	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.730047941 CEST	61578	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.730052948 CEST	443	61578	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.802598000 CEST	61570	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.802690029 CEST	443	61570	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:17.833833933 CEST	61569	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:17.833898067 CEST	443	61569	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.392565966 CEST	443	61576	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.393188000 CEST	61576	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.393203974 CEST	443	61576	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.393677950 CEST	61576	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.393682003 CEST	443	61576	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.398539066 CEST	61528	443	192.168.2.4	142.250.186.132
Oct 23, 2024 23:09:18.398607969 CEST	443	61528	142.250.186.132	192.168.2.4
Oct 23, 2024 23:09:18.398966074 CEST	443	61575	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.399498940 CEST	61575	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.399559021 CEST	443	61575	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.400454044 CEST	443	61574	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.400454998 CEST	61575	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.400506973 CEST	443	61575	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.400892973 CEST	61574	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.400904894 CEST	443	61574	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.401248932 CEST	61574	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.401253939 CEST	443	61574	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.462631941 CEST	443	61577	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.463135004 CEST	61577	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.463161945 CEST	443	61577	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.463617086 CEST	61577	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.463624954 CEST	443	61577	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.506480932 CEST	443	61578	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.506897926 CEST	61578	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.506918907 CEST	443	61578	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.507388115 CEST	61578	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.507392883 CEST	443	61578	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.528389931 CEST	443	61576	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.528547049 CEST	443	61576	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.528599024 CEST	61576	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.528637886 CEST	61576	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.528654099 CEST	443	61576	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.528666973 CEST	61576	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.528673887 CEST	443	61576	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.532244921 CEST	61579	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.532290936 CEST	443	61579	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.532490015 CEST	61579	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.532632113 CEST	61579	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.532655001 CEST	443	61579	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.537719965 CEST	443	61575	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.538184881 CEST	443	61575	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.538382053 CEST	61575	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.538382053 CEST	61575	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.538383007 CEST	61575	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.541115046 CEST	61580	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.541142941 CEST	443	61580	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.541203022 CEST	61580	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.541347027 CEST	61580	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.541358948 CEST	443	61580	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.541357994 CEST	443	61574	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.541857004 CEST	443	61574	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.541901112 CEST	61574	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.541927099 CEST	61574	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.541940928 CEST	443	61574	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.541951895 CEST	61574	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.541956902 CEST	443	61574	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.544302940 CEST	61581	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.544384956 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.544466972 CEST	61581	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.544847965 CEST	61581	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.544929981 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.602619886 CEST	443	61577	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.602788925 CEST	443	61577	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.603104115 CEST	61577	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.603105068 CEST	61577	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.603105068 CEST	61577	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.606010914 CEST	61582	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.606036901 CEST	443	61582	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.606101990 CEST	61582	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.606506109 CEST	61582	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.606518984 CEST	443	61582	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.647762060 CEST	443	61578	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.647918940 CEST	443	61578	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.648106098 CEST	61578	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.648107052 CEST	61578	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.648107052 CEST	61578	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.650599003 CEST	61583	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.650684118 CEST	443	61583	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.650810003 CEST	61583	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.651369095 CEST	61583	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.651437044 CEST	443	61583	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.849756956 CEST	61575	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.849822998 CEST	443	61575	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.913600922 CEST	61577	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.913666964 CEST	443	61577	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:18.961622000 CEST	61578	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:18.961643934 CEST	443	61578	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.035088062 CEST	443	61582	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.035552025 CEST	443	61580	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.035660982 CEST	61582	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.035677910 CEST	443	61582	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.035969973 CEST	61580	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.035975933 CEST	443	61580	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.036389112 CEST	61580	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.036400080 CEST	443	61580	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.036520958 CEST	61582	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.036525965 CEST	443	61582	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.041469097 CEST	443	61583	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.041600943 CEST	443	61579	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.041830063 CEST	61583	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.041862965 CEST	443	61583	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.042174101 CEST	61583	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.042185068 CEST	443	61583	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.042242050 CEST	61579	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.042274952 CEST	443	61579	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.042586088 CEST	61579	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.042606115 CEST	443	61579	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.044469118 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.044938087 CEST	61581	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.044953108 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.045300007 CEST	61581	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.045310020 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.171215057 CEST	443	61582	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.171377897 CEST	443	61582	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.171495914 CEST	61582	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.171495914 CEST	61582	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.171533108 CEST	61582	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.171549082 CEST	443	61582	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.174787045 CEST	61584	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.174829960 CEST	443	61584	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.174897909 CEST	61584	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.175132990 CEST	61584	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.175148010 CEST	443	61584	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.175837994 CEST	443	61580	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.175997019 CEST	443	61580	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.176055908 CEST	61580	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.176326990 CEST	61580	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.176326990 CEST	61580	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.176336050 CEST	443	61580	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.176345110 CEST	443	61580	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.178668022 CEST	61585	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.178692102 CEST	443	61585	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.178774118 CEST	61585	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.178852081 CEST	443	61583	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.178900957 CEST	61585	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.178914070 CEST	443	61585	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.179114103 CEST	443	61583	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.179191113 CEST	61583	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.179244995 CEST	61583	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.179244995 CEST	61583	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.179280996 CEST	443	61583	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.179383993 CEST	443	61583	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.180685997 CEST	443	61579	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.180898905 CEST	443	61579	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.180918932 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.180946112 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.181126118 CEST	61579	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.181140900 CEST	61581	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.181176901 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.181360960 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.187370062 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.189486980 CEST	61581	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.189677000 CEST	61579	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.189702034 CEST	443	61579	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.189718008 CEST	61579	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.189726114 CEST	443	61579	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.189733982 CEST	61581	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.189743996 CEST	443	61581	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.192142010 CEST	61586	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.192184925 CEST	443	61586	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.192677021 CEST	61586	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.193100929 CEST	61587	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.193113089 CEST	443	61587	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.193186998 CEST	61588	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.193209887 CEST	61587	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.193213940 CEST	443	61588	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.193258047 CEST	61588	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.193315983 CEST	61586	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.193342924 CEST	61587	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.193347931 CEST	443	61586	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.193352938 CEST	443	61587	13.107.253.72	192.168.2.4
Oct 23, 2024 23:09:20.193392992 CEST	61588	443	192.168.2.4	13.107.253.72
Oct 23, 2024 23:09:20.193406105 CEST	443	61588	13.107.253.72	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 23:08:02.089819908 CEST	53	60055	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:02.178978920 CEST	53	56570	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:03.462903023 CEST	53	54059	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:03.893114090 CEST	53143	53	192.168.2.4	1.1.1.1
Oct 23, 2024 23:08:03.893318892 CEST	59554	53	192.168.2.4	1.1.1.1
Oct 23, 2024 23:08:03.900974989 CEST	53	53143	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:03.901566029 CEST	53	59554	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:05.990936995 CEST	58222	53	192.168.2.4	1.1.1.1
Oct 23, 2024 23:08:05.991086006 CEST	54051	53	192.168.2.4	1.1.1.1
Oct 23, 2024 23:08:05.998373032 CEST	53	58222	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:05.998871088 CEST	53	54051	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:20.153304100 CEST	138	138	192.168.2.4	192.168.2.255
Oct 23, 2024 23:08:20.499605894 CEST	53	51831	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:39.437572002 CEST	53	64953	1.1.1.1	192.168.2.4
Oct 23, 2024 23:08:43.481460094 CEST	53	61225	1.1.1.1	192.168.2.4
Oct 23, 2024 23:09:02.778037071 CEST	53	53165	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 23:08:03.893114090 CEST	192.168.2.4	1.1.1.1	0xb44b	Standard query (0)	email.sg.on24event.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 23:08:03.893318892 CEST	192.168.2.4	1.1.1.1	0xcea0	Standard query (0)	email.sg.on24event.com	65	IN (0x0001)	false
Oct 23, 2024 23:08:05.990936995 CEST	192.168.2.4	1.1.1.1	0xdfe2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 23:08:05.991086006 CEST	192.168.2.4	1.1.1.1	0x5a79	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 23:08:03.900974989 CEST	1.1.1.1	192.168.2.4	0xb44b	No error (0)	email.sg.on24event.com	r-email.sg.on24event.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 23:08:03.900974989 CEST	1.1.1.1	192.168.2.4	0xb44b	No error (0)	r-email.sg.on24event.com		199.83.44.68	A (IP address)	IN (0x0001)	false
Oct 23, 2024 23:08:03.901566029 CEST	1.1.1.1	192.168.2.4	0xcea0	No error (0)	email.sg.on24event.com	r-email.sg.on24event.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 23:08:05.998373032 CEST	1.1.1.1	192.168.2.4	0xdfe2	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 23, 2024 23:08:05.998871088 CEST	1.1.1.1	192.168.2.4	0x5a79	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 23:08:19.546526909 CEST	1.1.1.1	192.168.2.4	0xceda	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 23:08:19.546526909 CEST	1.1.1.1	192.168.2.4	0xceda	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 23, 2024 23:08:32.717802048 CEST	1.1.1.1	192.168.2.4	0x43f3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 23:08:32.717802048 CEST	1.1.1.1	192.168.2.4	0x43f3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 23, 2024 23:08:57.292284012 CEST	1.1.1.1	192.168.2.4	0x64a	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 23:08:57.292284012 CEST	1.1.1.1	192.168.2.4	0x64a	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 23:08:57.292284012 CEST	1.1.1.1	192.168.2.4	0x64a	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 23, 2024 23:09:16.671580076 CEST	1.1.1.1	192.168.2.4	0x9359	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 23:09:16.671580076 CEST	1.1.1.1	192.168.2.4	0x9359	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

email.sg.on24event.com

https:

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	199.83.44.68	443	4600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:08:04 UTC	953	OUT	GET /ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX HTTP/1.1 Host: email.sg.on24event.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 21:08:04 UTC	193	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 23 Oct 2024 21:08:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 291 Connection: close X-Robots-Tag: noindex, nofollow
2024-10-23 21:08:04 UTC	291	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 57 72 6f 6e 67 20 4c 69 6e 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 57 72 6f 6e 67 20 4c 69 6e 6b 3c 2f 68 31 3e 3c 70 3e 59 6f 75 20 68 61 76 65 20 63 6c 69 63 6b 65 64 20 6f 6e 20 61 6e 20 69 6e 76 61 6c 69 64 20 6c 69 6e 6b 2e 20 20 50 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 74 79 70 65 64 20 74 68 65 20 6c 69 6e 6b 20 63 6f 72 72 65 63 74 6c 79 2e 20 20 49 66 20 61 72 65 20 63 6f 70 79 69 6e 67 20 74 68 69 73 20 6c 69 6e 6b 20 66 72 6f 6d 20 61 20 6d 61 69 6c 20 72 65 61 64 65 72 20 70 6c 65 61 73 65 20 65 6e 73 75 72 65 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 63 6f 70 69 65 64 20 61 6c 6c 20 74 68 65 20 Data Ascii: <html><head><title>Wrong Link</title></head><body><h1>Wrong Link</h1><p>You have clicked on an invalid link. Please make sure that you have typed the link correctly. If are copying this link from a mail reader please ensure that you have copied all the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	199.83.44.68	443	4600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:08:04 UTC	888	OUT	GET /favicon.ico HTTP/1.1 Host: email.sg.on24event.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 21:08:05 UTC	143	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 23 Oct 2024 21:08:05 GMT Content-Type: text/html Content-Length: 564 Connection: close
2024-10-23 21:08:05 UTC	564	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:08:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 21:08:07 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=70685 Date: Wed, 23 Oct 2024 21:08:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:08:08 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 21:08:09 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=70652 Date: Wed, 23 Oct 2024 21:08:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 21:08:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	61503	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:08:58 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:08:59 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:08:58 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210858Z-r1755647c66vrwbmeqw88hpesn00000008hg000000003ur1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:08:59 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 21:08:59 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 21:08:59 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 21:08:59 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 21:08:59 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 21:08:59 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 21:08:59 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 21:08:59 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 21:08:59 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 21:09:00 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	61507	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:01 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:01 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210901Z-r1755647c66wjht63r8k9qqnrs00000007ag00000000265e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:02 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	61508	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:01 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:02 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:01 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210901Z-r1755647c66x46wg1q56tyyk68000000081g000000003dg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:02 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	61505	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:01 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:02 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:01 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210901Z-17fbfdc98bbq2x5bzrteug30v8000000068g000000004wgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:02 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	61504	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:01 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:02 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:01 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210901Z-r1755647c669hnl7dkxy835cqc00000006eg000000008368 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:02 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	61506	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:01 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:01 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 77f74883-b01e-0001-1a50-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210901Z-17fbfdc98bbgzrcvp7acfz2d3000000006bg0000000046ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:02 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	61510	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:03 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a0191c6f-501e-0047-3c5d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210903Z-17fbfdc98bbnmnfvzuhft9x8zg0000000540000000001gnx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:03 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	61511	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:03 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:03 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210903Z-r1755647c66k9st9tvd58z9dg800000008wg000000000v9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:03 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	61509	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:03 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:03 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210903Z-17fbfdc98bbwfg2nvhsr4h37pn00000006c0000000003ure x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:03 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	61513	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:03 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210903Z-r1755647c66nxct5p0gnwngmx000000007xg0000000076da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	61512	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:03 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:03 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ad393351-301e-0099-6d59-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210903Z-17fbfdc98bbnhb2b0umpa641c800000006ag0000000019mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:03 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	61515	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:04 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:04 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: bac56044-101e-0079-505d-235913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210904Z-17fbfdc98bb96dqv0e332dtg60000000065g000000006t1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:04 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	61516	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:04 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8659e35a-201e-005d-7d92-1fafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210904Z-r1755647c66lljn2k9s29ch9ts00000008v00000000030d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:04 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	61517	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:04 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210904Z-r1755647c66h2wzt2z0cr0zc7400000002w0000000005cy0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	61518	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:05 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210905Z-r1755647c66m4jttnz6nb8kzng0000000780000000004xku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	61519	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:05 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:05 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210905Z-r1755647c66gb86l6k27ha2m1c00000007ag000000002uss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:05 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	61520	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:05 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:05 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: fe83e199-601e-00ab-415a-2366f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210905Z-17fbfdc98bbk7nhquz3tfc3wbg000000068g000000005det x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:05 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	61522	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:05 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 5e1d4904-301e-0020-1550-236299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210905Z-17fbfdc98bb6q7cv86r4xdspkg0000000690000000006dsg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	61521	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:05 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:05 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210905Z-r1755647c66zs9x4962sbyaz1w00000007200000000014mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	61523	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:06 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:06 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: b1dca041-701e-0001-1ae2-20b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210906Z-r1755647c66tmf6g4720xfpwpn00000009pg0000000009n5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:07 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	61526	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:07 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210907Z-17fbfdc98bbq2x5bzrteug30v8000000068g000000004wqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	61524	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:07 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:07 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210907Z-17fbfdc98bb6q7cv86r4xdspkg00000006g00000000008x4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:07 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	61525	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:07 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210907Z-r1755647c66r2hg89mqr09g9w00000000110000000005k3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	61527	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:07 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:07 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b93710ac-501e-007b-525a-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210907Z-17fbfdc98bbwfg2nvhsr4h37pn00000006cg000000003azc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:07 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	61529	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:09 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6949b098-b01e-0084-1a35-21d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210909Z-r1755647c66ldfgxa3qp9d53us00000008sg000000005psv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	61530	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:09 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:09 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210909Z-17fbfdc98bbx4f4q0941cebmvs000000065g000000007d3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:09 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	61532	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:09 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f82a9b3d-301e-005d-05cf-20e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210909Z-r1755647c66cdf7jx43n17haqc00000009g0000000005xpv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	61531	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:09 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:09 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210909Z-17fbfdc98bbqc8zsbguzmabx6800000006a0000000000wnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:09 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	61533	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:09 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210909Z-17fbfdc98bbx648l6xmxqcmf2000000006ag000000002qv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	61536	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:10 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:10 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 6dfcf22e-e01e-0051-345d-2084b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210910Z-r1755647c66z4pt7cv1pnqayy400000008w0000000001hn8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:10 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	61535	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:10 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 265f42d2-801e-0047-38c8-207265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210910Z-r1755647c66xrxq4nv7upygh4s0000000270000000005z87 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	61534	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:10 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 80263b1c-901e-002a-38ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210910Z-r1755647c66r2hg89mqr09g9w00000000160000000001dy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	61537	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:10 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 064568ba-501e-008c-7d65-23cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210910Z-17fbfdc98bbndwgn5b4pg7s8bs0000000690000000002kd7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	61538	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:10 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 5fe4afb9-d01e-008e-4659-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210910Z-17fbfdc98bbk7nhquz3tfc3wbg000000067g000000006875 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	61539	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:11 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:11 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 319a90d3-d01e-0066-4138-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210911Z-r1755647c66wjht63r8k9qqnrs000000076g0000000076g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:11 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	61541	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:11 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:11 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: ee1aea59-301e-0052-0750-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210911Z-17fbfdc98bbcrtjhdvnfuyp28800000006ag000000006vcb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:11 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	61540	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:11 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:11 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: ad3e5457-301e-0099-155a-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210911Z-17fbfdc98bbmh88pm95yr8cy5n000000058g000000003h42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:11 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	61542	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:11 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:11 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 95a4abee-901e-0016-6e50-23efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210911Z-17fbfdc98bb75b2fuh11781a0n0000000670000000004mv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	61543	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:11 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210911Z-r1755647c66fnxpdavnqahfp1w0000000720000000001hk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	61545	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:12 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:12 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 0c1e413e-701e-0021-5e50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210912Z-17fbfdc98bbrx2rj4asdpg8sbs00000002cg0000000006xz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:12 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	61546	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:12 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:12 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3589f4cc-c01e-0079-731b-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210912Z-r1755647c66xrxq4nv7upygh4s0000000290000000003k7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:12 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	61544	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:12 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:12 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210912Z-r1755647c66m4jttnz6nb8kzng00000007cg000000000679 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:12 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	61548	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:12 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:12 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0c1e418e-701e-0021-2a50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210912Z-17fbfdc98bbrx2rj4asdpg8sbs00000002c0000000000s8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:12 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	61547	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:12 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:12 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1bb7fc0c-c01e-0046-7759-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210912Z-17fbfdc98bb75b2fuh11781a0n000000067g000000003fkx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:12 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	61550	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:13 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:13 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 0658eb7f-f01e-003f-5292-1fd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210913Z-r1755647c66ww2rh494kknq3r000000009h0000000004xvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:13 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	61551	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:13 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:13 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f651688a-e01e-0071-5b56-2308e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210913Z-17fbfdc98bbnmnfvzuhft9x8zg000000055g000000000hy0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:13 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	61549	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:13 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:13 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 68ab0001-401e-0064-04b8-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210913Z-r1755647c66kv68zfmyfrbcqzg000000076000000000792x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:13 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	61552	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:13 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210913Z-r1755647c66h2wzt2z0cr0zc7400000002y0000000003n15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	61553	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:13 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: e93de7dd-201e-006e-73e3-20bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210913Z-r1755647c66r2hg89mqr09g9w0000000016g0000000014yq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	61554	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:14 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9cd877b9-501e-0016-1f56-23181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210914Z-17fbfdc98bb7qlzm4x52d2225c000000066g000000007e25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	61556	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:14 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4edb1b06-d01e-00a1-56e1-2035b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210914Z-r1755647c66ww2rh494kknq3r000000009p0000000000ncu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	61555	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:14 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210914Z-r1755647c66vrwbmeqw88hpesn00000008ng0000000008kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	61557	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:14 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210914Z-17fbfdc98bbvf2fnx6t6w0g25n000000068g000000006srw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	61558	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:14 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210914Z-r1755647c66gb86l6k27ha2m1c0000000760000000007d0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	61561	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:15 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:15 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cc65e471-501e-008c-15b8-20cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210915Z-r1755647c66j878m0wkraqty380000000760000000007b11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:15 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	61560	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:15 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210915Z-17fbfdc98bb2fzn810kvcg2zng00000006c00000000062gr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	61559	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:15 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210915Z-r1755647c66gb86l6k27ha2m1c0000000770000000005qus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	61563	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:15 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:15 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 44b67bbb-401e-0067-2250-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210915Z-17fbfdc98bbn5xh71qanksxprn00000006dg000000004c0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:15 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	61562	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:15 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:15 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: f58edff3-b01e-0002-5659-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210915Z-17fbfdc98bb94gkbvedtsa5ef400000006ag0000000050bb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:15 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	61564	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:16 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210916Z-17fbfdc98bbgpkh7048gc3vfcc00000006bg0000000064gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	61566	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:16 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1c36e671-f01e-0096-085a-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210916Z-17fbfdc98bblptj7fr9s141cpc00000006cg000000001hsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	61565	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:16 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:16 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: e131a16a-201e-005d-6a5d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210916Z-17fbfdc98bbn5xh71qanksxprn00000006cg00000000572m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:16 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	61567	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:16 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:16 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210916Z-17fbfdc98bbx648l6xmxqcmf2000000006dg000000000bfq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:16 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	61568	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:16 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:16 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2157dfbc-901e-0048-585d-23b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210916Z-17fbfdc98bbpc9nz0r22pywp0800000006e0000000003f5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:16 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	61569	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:17 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210917Z-r1755647c66cdf7jx43n17haqc00000009n0000000001kd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	61570	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:17 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:17 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210917Z-r1755647c66cdf7jx43n17haqc00000009e0000000008770 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:17 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	61571	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:17 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 2067cf5d-601e-0001-3659-23faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210917Z-17fbfdc98bblvnlh5w88rcarag00000006b000000000749x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	61572	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:17 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:17 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 310b9d61-301e-0051-4f21-2138bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210917Z-r1755647c66kmfl29f2su56tc400000009gg000000005y6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:17 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	61573	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:17 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:17 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210917Z-17fbfdc98bbnhb2b0umpa641c8000000067g000000003w35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:17 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	61576	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:18 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9728de04-701e-0097-2579-23b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210918Z-17fbfdc98bbvwcxrk0yzwg4d5800000006d000000000320d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	61575	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:18 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210918Z-17fbfdc98bbvwcxrk0yzwg4d5800000006e00000000023bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	61574	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:18 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210918Z-17fbfdc98bbvcvlzx1n0fduhm000000006c00000000067pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	61577	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:18 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 610ea227-401e-00ac-206b-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210918Z-17fbfdc98bbnmnfvzuhft9x8zg000000050g000000005e9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	61578	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:18 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:18 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7699e86-701e-0050-405d-236767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210918Z-17fbfdc98bbgzrcvp7acfz2d3000000006f00000000014ut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:18 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	61580	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:20 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:20 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: d90f75f3-d01e-0066-095d-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210920Z-17fbfdc98bbl89flqtm21qm6rn00000006eg000000002gy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:20 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	61582	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:20 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:20 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210920Z-17fbfdc98bbkw9phumvsc7yy8w00000006bg000000002d0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:20 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	61583	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:20 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:20 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210920Z-r1755647c66wjht63r8k9qqnrs000000075g00000000823r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:20 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	61579	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:20 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: ec87b83f-a01e-0053-3f64-238603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210920Z-17fbfdc98bbvwcxrk0yzwg4d5800000006fg000000000kxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	61581	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:20 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:20 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210920Z-r1755647c66kmfl29f2su56tc400000009fg000000005xfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:20 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	61585	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:21 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:21 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 47efb004-101e-0017-69d3-2047c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210921Z-r1755647c66prnf6k99z0m3kzc00000008tg000000003yu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:21 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	61586	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:21 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:21 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 639ae494-d01e-0082-069a-20e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210921Z-r1755647c66ww2rh494kknq3r000000009n0000000001e0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:21 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	61584	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:21 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:21 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210921Z-17fbfdc98bbwfg2nvhsr4h37pn00000006c0000000003uu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:21 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	61587	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:21 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210921Z-r1755647c66m4jttnz6nb8kzng00000007a0000000002m2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:21 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	61588	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:21 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:21 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5a8d2ac8-001e-0034-336b-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210921Z-17fbfdc98bb94gkbvedtsa5ef400000006f0000000000xhy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:21 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	61590	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:22 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210922Z-r1755647c66prnf6k99z0m3kzc00000008s00000000061gp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	61589	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:22 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 514e14b5-c01e-0014-51c9-20a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210922Z-r1755647c66tmf6g4720xfpwpn00000009mg000000001y2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	61592	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:22 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:22 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: b7bcbf2c-f01e-0071-0ae2-20431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210922Z-r1755647c66x46wg1q56tyyk68000000081g000000003e0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:22 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	61591	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:22 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210922Z-r1755647c66nfj7t97c2qyh6zg00000005s00000000000yv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	61593	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 21:09:22 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 21:09:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 21:09:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T210922Z-r1755647c66ldfgxa3qp9d53us00000008w0000000001t5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 21:09:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2132, Parent PID: 5500

General

Target ID:	0
Start time:	17:07:58
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4600, Parent PID: 2132

General

Target ID:	2
Start time:	17:08:00
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2136,i,1293478387212524177,9404733510419667675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6356, Parent PID: 5500

General

Target ID:	3
Start time:	17:08:03
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiH5NrSUgUqLrnQzdPXw8nHK6ugnD9lNS4JGfbwwuDDUiEhi9XGNxapWSDRGNOoS15h5cE95bcWlZ9IH4azvql6lGHtJRUi7rtn-2Fzb0tBcnr08rfzwKOlRYPL38hs-2FGE63s-3Dnybj_bNJYK7cPgMYSOVqZX8hsFRQ-2BUiS6nEFqdz2nSISnYBvQlR46zPXi1Chyc1-2FE-2B2YbB8Rrx1Xr8hLfzq0DX"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2132, Parent PID: 5500

General

Chronological Activities

Analysis Process: chrome.exePID: 4600, Parent PID: 2132

General

Chronological Activities

Analysis Process: chrome.exePID: 6356, Parent PID: 5500

General

Chronological Activities

Disassembly