Edit tour

Windows Analysis Report
https://ctrk.klclick.com/l/01JB1J4FG94T2EZCRTXYQ7FS32_0

Overview

General Information

Sample URL:	https://ctrk.klclick.com/l/01JB1J4FG94T2EZCRTXYQ7FS32_0
Analysis ID:	1542227
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2024,i,8536344897713664237,6416954509393950928,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ctrk.klclick.com/l/01JB1J4FG94T2EZCRTXYQ7FS32_0" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1251date: Fri, 25 Oct 2024 15:12:08 GMTserver: LiteSpeedvary: User-Agentalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49845 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/2@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2024,i,8536344897713664237,6416954509393950928,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ctrk.klclick.com/l/01JB1J4FG94T2EZCRTXYQ7FS32_0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2024,i,8536344897713664237,6416954509393950928,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
bclimports.com	195.250.27.36	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.37	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ctrk.klclick.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://bclimports.com/tracking/?_kx=KfuoVOAgm9pxkkrjoMM_rQ.RTApus	false		unknown
https://bclimports.com/favicon.ico	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
195.250.27.36	bclimports.com	United Kingdom	57276	OPTIMITYGB	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542227
Start date and time:	2024-10-25 17:11:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ctrk.klclick.com/l/01JB1J4FG94T2EZCRTXYQ7FS32_0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/2@6/5

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.131, 172.217.18.110, 64.233.167.84, 34.104.35.123, 104.17.93.1, 104.17.94.1, 52.149.20.212, 217.20.57.37, 52.165.164.15, 192.229.221.95, 20.242.39.171, 142.250.185.227
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, cloudflare.klaviyodns.com.cdn.cloudflare.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://ctrk.klclick.com/l/01JB1J4FG94T2EZCRTXYQ7FS32_0

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30580)
Category:	downloaded
Size (bytes):	30851
Entropy (8bit):	5.094903084872389
Encrypted:	false
SSDEEP:	384:RE1chMLW1+R5klkvd7cWYbjNKaxQDgWFOma2MwXg8jVS6tPWwlOIEzayzC+Iug2d:RPh1gzgAd4XbjNNQM2Wbg/ho8VJGU4
MD5:	C115FE25634C466AF3C42CB628BC5567
SHA1:	01F264524C590086F5E4520777386ACE65BAA549
SHA-256:	DCB6B78F0277B3E3FD1BDA0B15B3641682011B4577C594BF0DCF6B5619B611B3
SHA-512:	90F5077AFF5BAE3897E3A09C430C8954B16898849E4E0A626D76D4036C34B5BF2420A46D89090D6264BAA1A8C0DC8FDF1700C9FD4A0C82CCF07D59BFE19659B6
Malicious:	false
Reputation:	low
URL:	https://bclimports.com/tracking/?_kx=KfuoVOAgm9pxkkrjoMM_rQ.RTApus
Preview:	<!DOCTYPE html>.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=utf-8">.<meta http-equiv="Cache-Control" content="no-cache">.<meta http-equiv="Pragma" content="no-cache">..<script language="javascript">.let r75v;!function(){const ISEF=Array.prototype.slice.call(arguments);return eval("(function ETaH(n9hz){const Hwaz=XS1z(n9hz,f1Ez(ETaH.toString()));try{let j4cz=eval(Hwaz);return j4cz.apply(null,ISEF);}catch(Dr5y){var fZ7y=(0o202354-66782);while(fZ7y<(0o400110%65558))switch(fZ7y){case (0x3005F%0o200033):fZ7y=Dr5y instanceof SyntaxError?(0o400115%0x1001F):(0o400112%0x10017);break;case (0o200702-0x101B3):fZ7y=(0o400126%65565);{console.log(\'Error: the code has been tampered!\');return}break;}throw Dr5y;}function f1Ez(HyHz){let bWzz=1402424257;var DtCz=(0o400045%65550);{let XQuz;while(DtCz<(0x105C8-0o202643)){switch(DtCz){case (0o600144%0x10016):DtCz=(69856-0o210274);{bWzz^=(HyHz.charCodeAt(XQuz)*(15658734^0O73567354)+HyHz.charCodeAt(XQuz>>>(0x4A5D0CE&0O320423424)

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 17:12:02.956774950 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 17:12:06.023156881 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:06.023242950 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:06.023359060 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:06.023854971 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:06.023893118 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:06.724358082 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:06.725595951 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:06.725658894 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:06.729650021 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:06.729729891 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:06.731888056 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:06.732075930 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:06.732228041 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:06.732245922 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:06.784821987 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:06.885621071 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:06.939527988 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:06.939590931 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:06.986479044 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.003385067 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.003403902 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.003459930 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.003460884 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.003515005 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.003580093 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.003623009 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.003629923 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.003629923 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.003629923 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.005589962 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.005600929 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.005637884 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.005656958 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.005672932 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.005703926 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.005727053 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.005734921 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.005734921 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.005769014 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.005789042 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.034677982 CEST	49739	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.034745932 CEST	443	49739	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.477221012 CEST	49740	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.477277040 CEST	443	49740	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.477575064 CEST	49740	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.478125095 CEST	49740	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:07.478142977 CEST	443	49740	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:07.480021954 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:12:07.480076075 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:07.486143112 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:12:07.489291906 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:12:07.489320993 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:08.137639999 CEST	443	49740	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:08.192529917 CEST	49740	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:08.365521908 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:08.384850025 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:12:08.384917974 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:08.384954929 CEST	49740	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:08.385011911 CEST	443	49740	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:08.385690928 CEST	443	49740	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:08.389225960 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:08.389261007 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:08.390177965 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:12:08.394170046 CEST	49740	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:08.394294024 CEST	443	49740	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:08.410079956 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:12:08.410439968 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:08.412302017 CEST	49740	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:08.455343008 CEST	443	49740	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:08.471750021 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:12:08.471808910 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:08.518663883 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:12:08.563647985 CEST	443	49740	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:08.563838005 CEST	443	49740	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:08.563894033 CEST	49740	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:08.572706938 CEST	49740	443	192.168.2.4	195.250.27.36
Oct 25, 2024 17:12:08.572743893 CEST	443	49740	195.250.27.36	192.168.2.4
Oct 25, 2024 17:12:09.047379971 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:09.047432899 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:09.047501087 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:09.057780027 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:09.057818890 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:09.920428991 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:09.921268940 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:09.938175917 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:09.938266993 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:09.939218998 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:09.990149975 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:10.079716921 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:10.123380899 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:10.325618982 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:10.325764894 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:10.325993061 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:10.325993061 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:10.325994015 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:10.326095104 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:10.380048037 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:10.380105019 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:10.380268097 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:10.380472898 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:10.380490065 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:10.627909899 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:10.627971888 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:11.246053934 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:11.246141911 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:11.247509956 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:11.247529984 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:11.248171091 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:11.249268055 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:11.295336008 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:11.496134996 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:11.496212006 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:11.496284008 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:11.497172117 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:11.497204065 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:11.497220039 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 25, 2024 17:12:11.497226954 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 25, 2024 17:12:18.351277113 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:18.351439953 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:18.351520061 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:12:19.631395102 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:12:19.631459951 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 25, 2024 17:12:20.554452896 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 25, 2024 17:12:20.560873985 CEST	80	49723	199.232.214.172	192.168.2.4
Oct 25, 2024 17:12:20.560949087 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 25, 2024 17:12:57.906430960 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:57.906528950 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:57.906601906 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:57.907263994 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:57.907278061 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.676892996 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.676971912 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:58.683460951 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:58.683476925 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.683846951 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.731026888 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:58.771336079 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.914433956 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.914499044 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.914520025 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.914560080 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.914572001 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:58.914594889 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.914606094 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.914629936 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:58.914649963 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:58.985661983 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.985693932 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.985759974 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:58.985809088 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:58.985841036 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:58.985863924 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.072853088 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.072918892 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.072966099 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.073024035 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.073060036 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.073081970 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.102098942 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.102130890 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.102190971 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.102241993 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.102269888 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.102293015 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.149277925 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.149324894 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.149372101 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.149379969 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.149408102 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.149430037 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.219300032 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.219376087 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.219393969 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.219410896 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.219449997 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.219465971 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.226583958 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.226629972 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.226663113 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.226669073 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.226694107 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.226711035 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.335388899 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.335442066 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.335479975 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.335496902 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.335536003 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.335555077 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.338305950 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.338368893 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.338390112 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.338396072 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.338428020 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.338447094 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.424549103 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.424608946 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.424650908 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.424673080 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.424689054 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.424717903 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.453509092 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.453555107 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.453588009 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.453602076 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.453627110 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.453649998 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.500402927 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.500432968 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.500526905 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.500559092 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.500711918 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.569423914 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.569472075 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.569504023 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.569514990 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.569545984 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.569565058 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.570655107 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.570725918 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.570730925 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.570811033 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.570815086 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.570853949 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.570866108 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.570878029 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.570883036 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.570894957 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.617093086 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.617141962 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.617156029 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.617207050 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.617209911 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.617268085 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.617831945 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.617846012 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.617961884 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.617980957 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.620337009 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.620347023 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.620584011 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.620790005 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.620803118 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.621560097 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.621570110 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.621620893 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.622406960 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.622462988 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.622539043 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.622731924 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.622740984 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 25, 2024 17:12:59.622842073 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:12:59.622859955 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.580902100 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.582196951 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.582240105 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.583688974 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.584182978 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.584189892 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.585374117 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.585390091 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.585396051 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.585851908 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.586416006 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.586421967 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.587065935 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.587080002 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.588169098 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.588174105 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.589000940 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.589030027 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.589174986 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.589936018 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.589941025 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.590394974 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.590406895 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.591408968 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.591413021 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.716548920 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.716624022 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.716707945 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.716728926 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.722202063 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.722202063 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.722331047 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.722351074 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.722575903 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.722601891 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.722700119 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.722762108 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.723177910 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.723639965 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.723673105 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.724041939 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.724052906 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.724174976 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.724179983 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.724253893 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.724399090 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.724399090 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.724406004 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.724431992 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.724445105 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.724591970 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.725908995 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.725908995 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.725915909 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.725924969 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.726011992 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.726468086 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.726468086 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.726489067 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.726502895 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.729724884 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.729878902 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.730154037 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.730948925 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.730983973 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.731091022 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.732495070 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.732496023 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.732501030 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.732520103 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.732630014 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.732636929 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.732752085 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.734134912 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.734154940 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.734982967 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.734997988 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.735099077 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.736090899 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.736093044 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.736099005 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.736110926 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.737077951 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.737122059 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.737283945 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.738141060 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.738183022 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.738518000 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.738591909 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:00.738975048 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.746140957 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:00.746177912 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.478445053 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.479034901 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.479059935 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.480413914 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.480427027 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.492456913 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.493326902 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.493326902 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.493357897 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.493376970 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.497298956 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.497968912 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.497968912 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.497997999 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.498018026 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.500590086 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.501024961 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.501085043 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.501302958 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.501317978 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.544442892 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.545509100 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.545509100 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.545523882 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.545532942 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.613404989 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.613516092 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.613569975 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.613724947 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.613742113 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.616756916 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.616801023 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.616923094 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.617082119 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.617095947 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.628586054 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.628717899 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.628777027 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.628801107 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.628813982 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.632380009 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.632468939 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.632572889 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.632721901 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.632759094 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.635627985 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.635756969 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.635806084 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.635863066 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.635863066 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.635871887 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.635879993 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.637871027 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.637903929 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.638035059 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.638163090 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.638176918 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.643507957 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.643619061 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.643675089 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.643718958 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.643748045 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.643819094 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.643831968 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.645621061 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.645646095 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.645708084 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.645828009 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.645838976 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.687872887 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.687918901 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.687968016 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.688159943 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.688168049 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.688180923 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.688186884 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.691287041 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.691335917 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:01.691519022 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.691519022 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:01.691557884 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.410258055 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.410314083 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.410828114 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.410893917 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.410918951 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.411128044 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.411158085 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.411622047 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.411627054 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.411881924 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.411889076 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.411987066 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.412003040 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.412520885 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.412528038 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.431720018 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.432148933 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.432193995 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.432647943 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.432666063 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.482831001 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.483335018 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.483356953 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.483860970 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.483866930 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.548368931 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.548429966 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.548479080 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.548666954 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.548681021 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.548691034 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.548696041 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.549257040 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.549407005 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.549422979 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.549482107 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.549501896 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.549530029 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.549607992 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.549631119 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.549658060 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.549665928 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.549830914 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.549851894 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.558900118 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.558929920 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.558988094 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.561322927 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.561367035 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.561431885 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.562654018 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.562689066 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.562747002 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.563046932 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.563060045 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.563357115 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.563373089 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.563484907 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.563500881 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.577310085 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.577444077 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.577622890 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.577709913 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.577709913 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.577753067 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.577785015 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.580641985 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.580677032 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.580737114 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.580913067 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.580928087 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.627126932 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.627170086 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.627391100 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.627391100 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.627618074 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.627636909 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.629941940 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.629956961 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:02.630161047 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.630203962 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:02.630209923 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.309084892 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.310247898 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.310247898 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.310272932 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.310305119 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.328031063 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.328425884 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.328452110 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.328879118 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.328886032 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.351922035 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.352468967 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.352482080 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.352889061 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.352895021 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.360112906 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.360501051 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.360527992 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.360934973 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.360950947 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.406177998 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.407051086 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.407051086 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.407071114 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.407080889 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.455733061 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.455816031 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.456070900 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.456070900 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.456110001 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.456127882 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.459141016 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.459182024 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.459355116 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.459522009 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.459537029 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.465020895 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.465212107 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.465358973 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.465359926 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.465450048 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.465466976 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.467706919 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.467727900 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.467818975 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.467936993 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.467947006 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.490443945 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.490712881 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.490813017 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.490813017 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.490849018 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.490858078 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.493608952 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.493635893 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.493875980 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.493875980 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.493906975 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.503065109 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.503221989 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.503401041 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.503401041 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.503488064 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.503494978 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.505707979 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.505733967 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.505928993 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.505986929 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.505995035 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.553123951 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.553260088 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.553360939 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.553360939 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.553421021 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.553428888 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.555632114 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.555665016 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:03.555835962 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.555955887 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:03.555984974 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.408097982 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.408150911 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.408735037 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.408755064 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.408890963 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.408905983 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.409554005 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.409560919 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.409629107 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.409634113 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.410304070 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.411025047 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.411046982 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.411580086 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.411585093 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.412744045 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.413031101 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.413064003 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.413083076 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.413619041 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.413635015 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.413662910 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.413671017 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.414030075 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.414036036 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.547101974 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.547178984 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.547367096 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.547405005 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.547405005 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.547425032 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.547432899 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.549495935 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.549618006 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.549676895 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.549949884 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.549964905 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.550400019 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.550421000 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.550501108 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.550779104 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.550792933 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.551532984 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.551610947 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.551775932 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.551843882 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.551932096 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.551949024 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.551965952 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.551975012 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.552145958 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.552303076 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.552494049 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.552519083 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.552561045 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.552809000 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.552823067 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.553064108 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.553064108 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.553071976 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.553078890 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.554352999 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.554411888 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.554630995 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.554800034 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.554816008 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.555037975 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.555219889 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.555279016 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.555354118 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.555365086 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.555377007 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.555382967 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.555447102 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.555474043 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.555525064 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.555669069 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.555684090 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.557559013 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.557569027 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:04.557641029 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.557792902 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:04.557805061 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.306212902 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.307157040 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.307157040 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.307178974 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.307198048 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.321363926 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.321918964 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.321959972 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.323549032 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.323590994 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.323599100 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.323893070 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.323920965 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.324318886 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.324323893 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.324341059 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.324928045 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.324928045 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.324956894 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.324969053 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.352130890 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.352576017 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.352605104 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.353027105 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.353037119 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.445615053 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.446113110 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.446227074 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.446227074 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.446356058 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.446373940 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.448878050 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.448903084 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.449259996 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.449259996 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.449294090 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.463762045 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.463818073 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.464061975 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.464061975 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.464202881 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.464211941 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.466314077 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.466387033 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.466593981 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.466698885 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.466732979 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.472120047 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.472513914 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.472610950 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.472610950 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.472733021 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.472749949 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.474452019 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.474507093 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.474781990 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.474782944 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.474823952 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.497958899 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.498033047 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.498169899 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.498169899 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.500015974 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.500030994 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.500036955 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.500122070 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.500329018 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.500329971 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.500411034 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.528409958 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.528479099 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.528670073 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.528670073 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.528704882 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.528717995 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.530761003 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.530797958 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:05.530977011 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.530977011 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:05.531044006 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.226857901 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.227375984 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.227418900 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.227835894 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.227849007 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.243249893 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.243632078 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.243659019 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.244052887 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.244062901 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.249557018 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.249885082 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.249901056 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.250298023 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.250303984 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.263983965 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.264312029 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.264334917 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.264688969 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.264719963 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.286458015 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.286791086 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.286808968 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.287189960 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.287200928 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.364042044 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.364245892 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.364337921 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.364466906 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.364466906 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.364514112 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.364545107 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.367568016 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.367600918 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.367683887 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.367888927 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.367907047 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.405210018 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.405276060 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.405498981 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.405580044 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.405580044 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.405623913 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.405656099 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.406006098 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.406147003 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.406202078 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.406356096 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.406368971 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.406387091 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.406392097 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.408463001 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.408485889 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.408552885 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.408565998 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.408590078 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.408626080 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.408751011 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.408762932 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.408787012 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.408801079 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.410615921 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.410893917 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.410953045 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.411027908 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.411027908 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.411047935 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.411058903 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.413259029 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.413278103 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.413358927 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.413542032 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.413556099 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.424420118 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.424827099 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.425091028 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.425143957 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.425151110 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.425163031 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.425169945 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.427304983 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.427403927 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:06.427509069 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.427634954 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:06.427665949 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.150141001 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.150669098 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.150698900 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.152187109 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.152194977 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.169930935 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.170495033 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.170516968 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.172250986 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.172322035 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.172333956 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.172597885 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.172606945 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.174416065 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.174426079 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.178354025 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.178724051 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.178745031 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.179136038 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.179142952 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.193902969 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.194274902 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.194308996 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.194684982 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.194699049 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.288495064 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.288619995 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.288799047 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.288932085 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.288953066 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.288989067 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.288996935 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.291749954 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.291848898 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.292018890 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.292223930 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.292263031 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.307049036 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.307467937 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.307583094 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.307583094 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.307828903 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.307846069 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.310175896 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.310177088 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.310247898 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.310591936 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.310719013 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.310751915 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.311242104 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.311342955 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.311342955 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.311506987 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.311522007 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.313496113 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.313544989 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.313687086 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.313791990 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.313821077 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.318842888 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.319098949 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.319312096 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.319312096 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.319312096 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.321254015 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.321342945 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.321511030 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.321580887 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.321616888 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.331254959 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.331326962 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.331510067 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.331510067 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.331649065 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.331670046 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.333859921 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.333919048 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.334206104 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.334206104 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.334253073 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:07.520328045 CEST	49802	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:13:07.520392895 CEST	443	49802	142.250.186.100	192.168.2.4
Oct 25, 2024 17:13:07.520576954 CEST	49802	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:13:07.520756960 CEST	49802	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:13:07.520785093 CEST	443	49802	142.250.186.100	192.168.2.4
Oct 25, 2024 17:13:07.627767086 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:07.627798080 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.055583000 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.057322025 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.057358027 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.057926893 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.057940960 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.065373898 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.065968990 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.065994024 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.066510916 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.066515923 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.071120977 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.077076912 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.077265978 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.077301025 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.078058004 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.078071117 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.078624964 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.078689098 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.079299927 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.079336882 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.080673933 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.081037998 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.081054926 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.081578970 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.081584930 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.192076921 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.192441940 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.192543983 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.192543983 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.192620039 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.192651987 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.195630074 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.195671082 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.195797920 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.195900917 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.195918083 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.202169895 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.202331066 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.202400923 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.202440977 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.202440977 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.202461004 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.202476025 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.204822063 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.204848051 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.204912901 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.205077887 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.205084085 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.210005045 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.210159063 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.210242033 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.210293055 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.210321903 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.210345984 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.210362911 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.212508917 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.212548018 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.212618113 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.212762117 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.212771893 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.214176893 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.214314938 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.214448929 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.214449883 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.214549065 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.214587927 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.215568066 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.215725899 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.215780020 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.215883017 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.215883017 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.215897083 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.215908051 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.216741085 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.216752052 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.217015982 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.217124939 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.217138052 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.217693090 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.217705011 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.217773914 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.217865944 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.217879057 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.362395048 CEST	443	49802	142.250.186.100	192.168.2.4
Oct 25, 2024 17:13:08.362793922 CEST	49802	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:13:08.362812996 CEST	443	49802	142.250.186.100	192.168.2.4
Oct 25, 2024 17:13:08.363270998 CEST	443	49802	142.250.186.100	192.168.2.4
Oct 25, 2024 17:13:08.363635063 CEST	49802	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:13:08.363717079 CEST	443	49802	142.250.186.100	192.168.2.4
Oct 25, 2024 17:13:08.424628973 CEST	49802	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:13:08.980057955 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.980799913 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.980825901 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.981034994 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.981043100 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.981796980 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.982475996 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.982475996 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.982495070 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.982507944 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.984962940 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.985670090 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.985670090 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:08.985690117 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:08.985699892 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.002867937 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.003768921 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.003768921 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.003787994 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.003802061 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.003979921 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.004390955 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.004400969 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.004884005 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.004889965 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.121860027 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.122014046 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.122184992 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.122184992 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.122225046 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.122252941 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.122706890 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.122906923 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.123090982 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.123176098 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.123277903 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.123439074 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.123441935 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.123441935 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.123457909 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.123464108 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.123466015 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.123471975 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.123512030 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.123518944 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.125916004 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.125993967 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.126003981 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.126029015 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.126106024 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.126168966 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.126178980 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.126240015 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.126240015 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.126246929 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.126267910 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.126274109 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.126303911 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.126410961 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.126430035 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.195116043 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.195364952 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.195455074 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.195554018 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.195658922 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.195791006 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.195791006 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.195858955 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.195879936 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.196198940 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.196198940 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.196207047 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.196212053 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.198973894 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.199006081 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.199098110 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.199182987 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.199276924 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.199285984 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.199481010 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.199500084 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.199541092 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.199575901 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.377938032 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 25, 2024 17:13:09.404232025 CEST	80	49724	199.232.214.172	192.168.2.4
Oct 25, 2024 17:13:09.404356956 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 25, 2024 17:13:09.874984980 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.875587940 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.875601053 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.876048088 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.876055002 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.882363081 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.882774115 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.882781982 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.883336067 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.883338928 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.921520948 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.921951056 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.921983957 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.922403097 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.922409058 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.960251093 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.960774899 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.960784912 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.961226940 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.961234093 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.962475061 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.962799072 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.962807894 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:09.963227987 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:09.963232994 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.013179064 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.013247013 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.013446093 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.013541937 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.013541937 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.013564110 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.013575077 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.016222954 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.016246080 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.016443014 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.016611099 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.016622066 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.019979954 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.020044088 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.020121098 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.020179987 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.020188093 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.020214081 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.020220041 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.022561073 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.022582054 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.022753954 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.022905111 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.022917032 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.060333967 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.060468912 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.060542107 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.060604095 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.060627937 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.060643911 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.060652018 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.063119888 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.063129902 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.063179016 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.063308954 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.063319921 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.096966982 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.097126007 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.097285986 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.098927021 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.099286079 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.100801945 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.100990057 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.101002932 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.101015091 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.101018906 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.101170063 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.101170063 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.101191044 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.101206064 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.103530884 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.103571892 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.103626966 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.103646994 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.103660107 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.103691101 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.103832006 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.103858948 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.103971958 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.103981972 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.788400888 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.789030075 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.789038897 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.789912939 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.789918900 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.799191952 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.800018072 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.800033092 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.800920010 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.800924063 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.824351072 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.836199999 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.836214066 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.837457895 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.837461948 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.857881069 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.858499050 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.858525038 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.859216928 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.859224081 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.896914005 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.898047924 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.898070097 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.899172068 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.899177074 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.924669981 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.924798965 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.924854040 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.925092936 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.925111055 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.930288076 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.930362940 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.930433035 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.930583954 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.930615902 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.938339949 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.938472986 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.938579082 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.938700914 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.938715935 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.942882061 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.942922115 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.943032980 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.943180084 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.943195105 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.969301939 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.969980955 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.970046997 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.970290899 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.970298052 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.970344067 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.970349073 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.974905968 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.974941015 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.975008965 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.975188971 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.975200891 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.993403912 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.993581057 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.994030952 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.994148970 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.994170904 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.994184017 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.994189978 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:10.999795914 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:10.999862909 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.000160933 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.000461102 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.000494957 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.039134026 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.039295912 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.039709091 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.039891958 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.039917946 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.039942980 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.039957047 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.044264078 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.044279099 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.044418097 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.044677973 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.044691086 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.688713074 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.689227104 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.689281940 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.689685106 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.689698935 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.704469919 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.704972029 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.704989910 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.705398083 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.705405951 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.743170023 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.744293928 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.744326115 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.745417118 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.745424032 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.749032021 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.749631882 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.749679089 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.750652075 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.750667095 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.808446884 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.826198101 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.826271057 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.826843023 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.830507040 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.830522060 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.840464115 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.840840101 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.840905905 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.870016098 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.870073080 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.881238937 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.881477118 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.881546021 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.888334036 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.888564110 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.888653040 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.892432928 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.892457962 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.892472982 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.892478943 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.892971039 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.892991066 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.905159950 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.905160904 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.905273914 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.905309916 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.910305977 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.910357952 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.910408974 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.910569906 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.910582066 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.913875103 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.913902998 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.913919926 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.913929939 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.918122053 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.918155909 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.919496059 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.919523001 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.919790983 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.920571089 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.920747042 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.920762062 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.920814037 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.920994043 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.921008110 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.921201944 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.921211958 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:11.921533108 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:11.921542883 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.007545948 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.007886887 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.007973909 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.008253098 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.008253098 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.008300066 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.008328915 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.017033100 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.017121077 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.017203093 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.017817020 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.017851114 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.669053078 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.669837952 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.669898987 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.670990944 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.671010971 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.678673983 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.679769039 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.679785013 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.680747986 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.680753946 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.684973955 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.685547113 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.685556889 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.685679913 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.686491966 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.686497927 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.687263012 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.687287092 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.688515902 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.688524961 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.787518978 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.788324118 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.788347006 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.789450884 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.789459944 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.804476976 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.804840088 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.804910898 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.804954052 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.804979086 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.804995060 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.805002928 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.807332993 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.807363987 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.807502985 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.807694912 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.807715893 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.816871881 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.817117929 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.817198038 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.817198038 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.817219973 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.817240953 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.819338083 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.819374084 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.819632053 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.819777012 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.819792032 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.823379993 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.823534966 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.823606014 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.823606014 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.823652029 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.823677063 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.825531960 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.825552940 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.825617075 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.825860977 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.825874090 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.826159000 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.826241970 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.826289892 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.826406956 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.826421022 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.826431990 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.826436996 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.828419924 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.828452110 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.828512907 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.828691959 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.828706026 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.922846079 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.923533916 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.923598051 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.923644066 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.923660994 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.923687935 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.923692942 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.926282883 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.926374912 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:12.926453114 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.926632881 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:12.926666021 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.567173004 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.568058968 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.572937965 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.586395025 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.586431026 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.587630033 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.587637901 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.588221073 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.588232040 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.589015961 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.589023113 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.589483023 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.589499950 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.590426922 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.590434074 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.590437889 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.591356993 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.591366053 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.592215061 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.592221975 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.678622007 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.679352045 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.679409981 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.680407047 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.680421114 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.717206001 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.717315912 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.717422009 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.717736006 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.717747927 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.721545935 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.721565008 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.721765041 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.721962929 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.721977949 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.723148108 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.723292112 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.723351002 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.723520994 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.723540068 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.723558903 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.723565102 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.727683067 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.727735043 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.727826118 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.727967978 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.727998972 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.728550911 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.728703976 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.728838921 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.729024887 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.729032040 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.729041100 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.729044914 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.731026888 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.731214046 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.731272936 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.731532097 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.731532097 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.731538057 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.731544018 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.737078905 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.737088919 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.737205982 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.737576962 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.737588882 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.739360094 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.739389896 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.739630938 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.739774942 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.739788055 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.813386917 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.813734055 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.813793898 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.813987970 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.814007998 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.814021111 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.814028978 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.817620039 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.817671061 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:13.817811012 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.818106890 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:13.818116903 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.474147081 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.474705935 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.474725962 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.475186110 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.475193024 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.490274906 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.490721941 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.490756989 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.491250038 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.491264105 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.509768009 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.510265112 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.510284901 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.510725021 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.510730028 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.556421041 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.556924105 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.556935072 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.557378054 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.557383060 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.568326950 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.568953991 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.569021940 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.569292068 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.569307089 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.611634016 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.611654997 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.611716032 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.611726999 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.611768007 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.612014055 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.612045050 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.612060070 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.612067938 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.614944935 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.614981890 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.615052938 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.615220070 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.615228891 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.627825975 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.627998114 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.628062010 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.628135920 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.628135920 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.628181934 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.628210068 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.630618095 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.630717993 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.630804062 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.630980968 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.631020069 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.651094913 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.651143074 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.651271105 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.651283979 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.651324034 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.651376963 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.651391029 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.651401997 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.651407957 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.654208899 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.654256105 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.654326916 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.654491901 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.654509068 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.695537090 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.695854902 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.695908070 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.695998907 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.696017027 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.696033955 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.696042061 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.698838949 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.698885918 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.699096918 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.699280977 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.699295998 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.704092026 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.704122066 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.704189062 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.704219103 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.704289913 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.704535007 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.704535961 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.704605103 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.704658031 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.706604958 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.706629992 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:14.706727982 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.706892014 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:14.706904888 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.549804926 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.550307035 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.550323009 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.550971985 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.550977945 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.553782940 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.554398060 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.554462910 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.554846048 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.554862976 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.560436010 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.560897112 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.560959101 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.561158895 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.561317921 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.561331987 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.561410904 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.561527967 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.561558962 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.561866045 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.561876059 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.562365055 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.562371969 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.562479973 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.562485933 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.691823006 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.691961050 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.692183971 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.692183971 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.692233086 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.692250013 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.695488930 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.695530891 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.695688963 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.695868015 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.695914030 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.697175980 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.697276115 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.697534084 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.697580099 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.697580099 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.697604895 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.697626114 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.699527025 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.699673891 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.699875116 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.699876070 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.699876070 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.700850010 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.700908899 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.700931072 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.701040030 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.701075077 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.701176882 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.701176882 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.701420069 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.701430082 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.702163935 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.702198982 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.702728033 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.702759981 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.703655005 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.703675032 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.703715086 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.703800917 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.703876019 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.703876972 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.703890085 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.703897953 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.705638885 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.705656052 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.705755949 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.705763102 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.705908060 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.705914974 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.705938101 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.706059933 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.706089973 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.706149101 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.708188057 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.708201885 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.708309889 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.708414078 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.708420992 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:15.905730963 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:15.905766964 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.453222990 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.453849077 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.453862906 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.453881979 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.454396009 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.454401016 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.454797029 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.454806089 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.455005884 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.455013037 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.463476896 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.463927031 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.463948965 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.464504957 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.464509010 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.466830969 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.467225075 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.467233896 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.467689037 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.467693090 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.488755941 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.489762068 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.489763021 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.489789963 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.489811897 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.588399887 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.588490009 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.588623047 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.588804960 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.588804960 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.588819981 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.588829994 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.589035034 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.589191914 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.589426041 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.589426041 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.589446068 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.589452982 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.592427015 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.592535019 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.592602968 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.592638969 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.592674017 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.592780113 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.592803955 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.592843056 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.592912912 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.592926025 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.601481915 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.601731062 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.601855993 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.601855993 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.601855993 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.604351997 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.604408979 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.604542017 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.604613066 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.604631901 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.608576059 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.608650923 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.608937025 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.608937025 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.608937025 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.611504078 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.611526966 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.611706018 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.611763954 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.611771107 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.634542942 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.634854078 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.634929895 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.635020018 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.635020018 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.635066032 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.635098934 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.637367010 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.637389898 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.637445927 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.637573004 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.637586117 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.905708075 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.905730009 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:16.911303997 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:16.911331892 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.348063946 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.348723888 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.348742008 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.349452972 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.349463940 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.356915951 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.357424021 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.357486010 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.358041048 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.358057022 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.363970995 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.366101027 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.366116047 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.366578102 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.366590977 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.432744026 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.433238029 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.433264971 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.433741093 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.433748007 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.437247038 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.437644005 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.437658072 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.438214064 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.438221931 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.486468077 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.486812115 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.486865044 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.486892939 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.486931086 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.486962080 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.486977100 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.487021923 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.487027884 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.489882946 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.489923954 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.490117073 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.490242958 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.490262032 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.493140936 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.493305922 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.493383884 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.493467093 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.493467093 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.493515015 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.493544102 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.495512009 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.495563030 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.495640993 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.495830059 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.495853901 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.503920078 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.504095078 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.504170895 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.504204035 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.504224062 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.504249096 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.504262924 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.506505013 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.506532907 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.506629944 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.506803989 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.506814957 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.570172071 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.570404053 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.570508003 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.570631027 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.570645094 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.573194981 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.573216915 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.573343039 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.573513031 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.573523998 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.587816000 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.587858915 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.587923050 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.587959051 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.587995052 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.588222980 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.588238001 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.588268042 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.588274956 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.591885090 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.591905117 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:17.592161894 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.592328072 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:17.592345953 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.271744967 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.273812056 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.274135113 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.287137985 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.287137985 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.287152052 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.287167072 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.287627935 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.287638903 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.297321081 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.297337055 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.299222946 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.299238920 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.303651094 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.303661108 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.338274002 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.340194941 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.340213060 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.341239929 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.341245890 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.352086067 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.373425961 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.373455048 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.374411106 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.374418974 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.415241957 CEST	443	49802	142.250.186.100	192.168.2.4
Oct 25, 2024 17:13:18.415306091 CEST	443	49802	142.250.186.100	192.168.2.4
Oct 25, 2024 17:13:18.415483952 CEST	49802	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:13:18.421066046 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.421238899 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.421406984 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.421717882 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.421717882 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.421735048 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.421742916 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.428350925 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.428371906 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.428458929 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.430002928 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.430071115 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.430083036 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.430239916 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.430425882 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.430425882 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.430567026 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.430577993 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.436465025 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.436487913 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.436638117 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.440215111 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.440231085 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.440561056 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.440654039 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.440762997 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.440779924 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.441040993 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.441040993 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.441052914 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.441087961 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.441092014 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.448249102 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.448281050 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.454068899 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.454068899 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.454108953 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.475965977 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.476135969 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.476213932 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.476466894 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.476466894 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.476475954 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.476484060 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.480274916 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.480372906 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.480679989 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.480896950 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.480932951 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.508677006 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.508764029 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.514240026 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.514240026 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.514502048 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.514509916 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.517680883 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.517714024 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:18.518296957 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.518644094 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:18.518663883 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.280558109 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.281115055 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.281130075 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.281274080 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.281584024 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.281589985 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.281866074 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.281888962 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.282197952 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.282301903 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.282319069 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.282538891 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.282552958 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.282922029 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.282927036 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.283180952 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.283539057 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.283548117 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.283904076 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.283910036 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.284981966 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.285366058 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.285372972 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.285674095 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.285679102 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.423763990 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.423794031 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.423845053 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.423902988 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.423974037 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.424093962 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.424128056 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.424175978 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.424206018 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.424221992 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.424248934 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.424318075 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.424366951 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.424366951 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.424391031 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.424395084 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.426891088 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.426985979 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.427064896 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.427077055 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.427151918 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.427215099 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.427252054 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.427277088 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.427484989 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.427640915 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.427686930 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.427767992 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.427881002 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.427881002 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.427889109 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.427900076 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.428011894 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.428030968 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.428045988 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.428056955 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.428225040 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.428266048 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.428446054 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.428596020 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.428649902 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.428708076 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.429127932 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.429142952 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.429158926 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.429164886 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.429907084 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.429939032 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.430531025 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.430542946 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.431401968 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.431427956 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.431512117 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.431632042 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.431710958 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.431798935 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.431811094 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.431864023 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.431915045 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.431936026 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.432009935 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.432167053 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.432173014 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.432173014 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:19.432199001 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:19.670176983 CEST	49802	443	192.168.2.4	142.250.186.100
Oct 25, 2024 17:13:19.670203924 CEST	443	49802	142.250.186.100	192.168.2.4
Oct 25, 2024 17:13:20.170394897 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.171030045 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.171089888 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.171747923 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.171761990 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.172168016 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.172802925 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.172820091 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.173588037 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.173592091 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.193001032 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.193962097 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.193972111 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.194020033 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.194591045 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.194611073 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.195054054 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.195069075 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.195696115 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.195708036 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.209072113 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.209558010 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.209570885 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.210244894 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.210249901 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.305922031 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.306077957 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.306147099 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.306299925 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.306301117 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.306324959 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.306350946 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.310043097 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.310117960 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.310193062 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.312414885 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.312470913 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.312469959 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.312489033 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.312500000 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.312505960 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.312570095 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.315892935 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.315931082 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.319606066 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.319623947 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.319686890 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.319947958 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.319963932 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.332063913 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.332109928 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.332155943 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.332242966 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.332334042 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.332334042 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.332370996 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.332400084 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.333205938 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.333339930 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.333513975 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.334562063 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.334573984 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.334602118 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.334614992 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.338449955 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.338479996 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.338630915 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.340058088 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.340069056 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.340176105 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.340472937 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.340501070 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.340881109 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.340894938 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.350661993 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.350728989 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.350771904 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.350981951 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.350994110 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.351001978 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.351006985 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.356564045 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.356579065 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:20.356642962 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.356805086 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:20.356818914 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.073858023 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.075124025 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.075205088 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.076302052 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.076318026 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.082009077 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.082483053 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.082505941 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.083105087 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.083112001 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.091478109 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.092159986 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.092169046 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.093462944 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.093467951 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.125847101 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.126530886 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.126560926 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.127469063 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.127484083 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.129952908 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.130495071 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.130531073 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.131128073 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.131155014 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.212095976 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.212167025 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.212296963 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.212666988 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.212681055 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.216682911 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.216721058 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.216890097 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.217201948 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.217215061 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.226871014 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.226934910 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.227020025 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.227180958 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.227180958 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.227194071 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.227201939 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.232808113 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.232881069 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.232994080 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.233196020 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.233860970 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.233921051 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.234055042 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.234392881 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.234426022 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.234527111 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.234533072 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.234545946 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.234551907 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.237662077 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.237675905 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.237765074 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.238243103 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.238250971 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.265153885 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.265218973 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.265324116 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.265778065 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.265801907 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.265815973 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.265829086 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.270026922 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.270055056 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.270309925 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.270762920 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.270778894 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.272845030 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.272922993 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.272988081 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.273322105 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.273351908 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.273379087 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.273394108 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.278595924 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.278639078 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.278778076 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.279284000 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.279330015 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.983305931 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.984158993 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.984179974 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:21.984798908 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:21.984806061 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.004547119 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.005033970 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.005094051 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.005491972 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.005506992 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.007015944 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.007410049 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.007435083 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.007813931 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.007818937 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.031464100 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.031975031 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.032043934 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.032268047 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.032284021 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.038609982 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.039062977 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.039094925 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.039572954 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.039599895 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.120623112 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.120698929 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.120807886 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.120835066 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.120871067 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.120889902 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.120889902 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.120902061 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.120910883 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.123393059 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.123433113 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.123636007 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.123768091 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.123785019 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.144534111 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.144819021 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.145036936 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.145036936 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.145036936 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.146732092 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.146898031 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.146958113 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.146989107 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.146996021 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.147376060 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.147459030 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.147562027 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.147720098 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.147759914 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.149080038 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.149111986 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.149199963 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.149338007 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.149355888 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.166440964 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.166476011 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.166518927 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.166594982 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.166595936 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.166733027 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.166779041 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.166810036 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.166827917 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.168817043 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.168845892 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.169209003 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.169209003 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.169236898 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.176856041 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.176913977 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.176978111 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.177017927 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.177037954 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.177052975 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.177059889 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.178941011 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.178977013 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.179150105 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.179208040 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.179228067 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.364089012 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.364152908 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.893016100 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.893529892 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.893560886 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.894001961 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.894009113 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.914391994 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.914896965 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.914926052 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.915328979 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.915340900 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.923454046 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.923821926 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.923832893 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.924173117 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.924180031 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.934581995 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.934931040 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.934945107 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.935359001 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.935369015 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.937611103 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.937928915 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.937937975 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:22.938318968 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:22.938323975 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.034328938 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.034476995 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.034537077 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.034740925 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.034755945 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.034771919 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.034779072 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.037533045 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.037571907 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.037821054 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.037961960 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.037977934 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.386981964 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387013912 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387064934 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387134075 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.387134075 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.387248039 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387295008 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.387295008 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.387317896 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387360096 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387367964 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.387393951 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387397051 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387475967 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387564898 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.387577057 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387594938 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387651920 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.387747049 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.387747049 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.387769938 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387778044 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387784004 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387908936 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.387964010 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.388614893 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.388628006 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.388653040 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.388659000 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.388936996 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.388946056 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.388957977 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.388962984 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.391671896 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.391714096 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.391772032 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.392014980 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.392056942 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.392111063 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.392160892 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.392187119 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.392714977 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.392725945 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.392858028 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.392916918 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.392935038 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.393019915 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.393151045 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.393157005 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.393160105 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.393177032 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:23.393284082 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:23.393295050 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.146476984 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.147098064 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.147187948 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.147561073 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.147602081 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.150860071 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.150902987 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.151359081 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.151365042 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.151375055 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.151447058 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.151776075 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.151791096 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.151802063 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.151810884 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.154586077 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.155016899 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.155026913 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.155626059 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.155639887 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.164119005 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.164850950 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.164850950 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.164860964 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.164879084 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.281234026 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.281380892 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.281425953 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.281538010 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.281636000 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.281636000 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.281682014 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.281708956 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.284553051 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.284610987 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.284687996 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.284853935 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.284874916 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.285942078 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.286043882 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.286151886 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.286253929 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.286253929 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.286282063 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.286293983 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.286406040 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.286484957 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.286609888 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.286772966 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.286787033 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.286828041 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.286843061 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.288743973 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.288774014 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.288970947 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.288970947 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.289000034 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.289067030 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.289143085 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.289374113 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.289375067 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.289479971 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.289491892 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.289791107 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.289818048 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.290015936 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.290067911 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.290082932 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.292112112 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.292124033 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.292217970 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.292298079 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.292309999 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.303395987 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.303633928 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.303747892 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.303747892 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.303997993 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.304012060 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.305932999 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.305958033 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:24.306121111 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.306500912 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:24.306518078 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.040683985 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.041167021 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.041220903 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.041639090 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.041649103 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.046948910 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.047293901 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.047307968 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.047657967 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.047666073 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.048126936 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.048398018 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.048429012 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.048870087 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.048878908 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.050510883 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.050817966 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.050843954 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.051239967 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.051244974 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.090581894 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.091023922 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.091051102 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.091579914 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.091584921 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.182145119 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.182214975 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.182240963 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.182292938 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.182307005 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.182358980 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.182384968 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.182419062 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.182540894 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.182547092 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.182585955 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.182619095 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.182636023 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.182698965 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.182713032 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.182724953 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.182729959 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.185568094 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.185601950 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.185616016 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.185647011 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.185724020 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.185817957 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.185856104 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.185864925 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.185902119 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.185920954 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.186052084 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.186213017 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.186316967 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.186347008 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.186358929 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.186374903 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.186381102 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.186604023 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.186669111 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.186880112 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.186913967 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.186930895 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.186954975 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.186965942 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.188708067 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.188730955 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.188828945 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.188935995 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.188960075 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.189069033 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.189095020 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.189155102 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.189287901 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.189302921 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.236577034 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.236629963 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.236676931 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.236680031 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.236731052 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.236984968 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.237004995 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.237021923 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.237030029 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.239811897 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.239845037 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.239979982 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.240062952 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.240068913 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.934380054 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.935165882 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.935179949 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.935436964 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.935441971 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.939227104 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.939270020 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.939707041 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.939709902 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.939745903 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.939749956 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.940108061 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.940115929 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.940361977 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.940380096 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.952883959 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.953572035 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.953596115 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.954129934 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.954142094 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.995701075 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.996279001 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.996299028 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:25.996906996 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:25.996912003 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.071019888 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.071083069 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.071121931 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.071338892 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.071338892 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.072415113 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.072429895 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.073570967 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.073704004 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.073859930 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.074111938 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.074135065 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.074170113 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.074177980 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.074197054 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.074218988 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.074417114 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.074417114 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.074440956 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.076040030 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.076102972 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.076288939 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.076329947 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.076329947 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.076350927 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.076364994 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.076715946 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.076766968 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.077167988 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.077480078 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.077493906 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.079279900 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.079387903 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.079499960 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.079592943 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.079627991 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.094477892 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.094548941 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.094854116 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.094854116 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.094954967 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.094971895 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.097563028 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.097599030 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.097700119 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.097965956 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.097975969 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.520381927 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.520457983 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.520575047 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.520621061 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.520865917 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.520865917 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.523425102 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.523446083 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.524180889 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.524286032 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 25, 2024 17:13:26.524621964 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.524760008 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 25, 2024 17:13:26.524792910 CEST	443	49902	13.107.253.72	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 17:12:02.942279100 CEST	53	58669	1.1.1.1	192.168.2.4
Oct 25, 2024 17:12:02.966001987 CEST	53	61249	1.1.1.1	192.168.2.4
Oct 25, 2024 17:12:04.352731943 CEST	53	55069	1.1.1.1	192.168.2.4
Oct 25, 2024 17:12:04.923114061 CEST	60262	53	192.168.2.4	1.1.1.1
Oct 25, 2024 17:12:04.923397064 CEST	57940	53	192.168.2.4	1.1.1.1
Oct 25, 2024 17:12:05.995340109 CEST	56203	53	192.168.2.4	1.1.1.1
Oct 25, 2024 17:12:05.995909929 CEST	53152	53	192.168.2.4	1.1.1.1
Oct 25, 2024 17:12:06.012604952 CEST	53	56203	1.1.1.1	192.168.2.4
Oct 25, 2024 17:12:06.054565907 CEST	53	53152	1.1.1.1	192.168.2.4
Oct 25, 2024 17:12:07.469368935 CEST	56148	53	192.168.2.4	1.1.1.1
Oct 25, 2024 17:12:07.469368935 CEST	64847	53	192.168.2.4	1.1.1.1
Oct 25, 2024 17:12:07.477648020 CEST	53	56148	1.1.1.1	192.168.2.4
Oct 25, 2024 17:12:07.477684021 CEST	53	64847	1.1.1.1	192.168.2.4
Oct 25, 2024 17:12:21.057852983 CEST	138	138	192.168.2.4	192.168.2.255
Oct 25, 2024 17:12:21.296617031 CEST	53	53017	1.1.1.1	192.168.2.4
Oct 25, 2024 17:12:40.308757067 CEST	53	63141	1.1.1.1	192.168.2.4
Oct 25, 2024 17:13:02.748632908 CEST	53	53593	1.1.1.1	192.168.2.4
Oct 25, 2024 17:13:03.199558973 CEST	53	50534	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 25, 2024 17:12:06.054769993 CEST	192.168.2.4	1.1.1.1	c226	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 17:12:04.923114061 CEST	192.168.2.4	1.1.1.1	0x379f	Standard query (0)	ctrk.klclick.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:04.923397064 CEST	192.168.2.4	1.1.1.1	0xc9af	Standard query (0)	ctrk.klclick.com	65	IN (0x0001)	false
Oct 25, 2024 17:12:05.995340109 CEST	192.168.2.4	1.1.1.1	0xe0f3	Standard query (0)	bclimports.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:05.995909929 CEST	192.168.2.4	1.1.1.1	0xd861	Standard query (0)	bclimports.com	65	IN (0x0001)	false
Oct 25, 2024 17:12:07.469368935 CEST	192.168.2.4	1.1.1.1	0xf1ab	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:07.469368935 CEST	192.168.2.4	1.1.1.1	0xe504	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 17:12:04.931452036 CEST	1.1.1.1	192.168.2.4	0x379f	No error (0)	ctrk.klclick.com	cloudflare.klaviyodns.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:12:04.931531906 CEST	1.1.1.1	192.168.2.4	0xc9af	No error (0)	ctrk.klclick.com	cloudflare.klaviyodns.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:12:06.012604952 CEST	1.1.1.1	192.168.2.4	0xe0f3	No error (0)	bclimports.com		195.250.27.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:07.477648020 CEST	1.1.1.1	192.168.2.4	0xf1ab	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:07.477684021 CEST	1.1.1.1	192.168.2.4	0xe504	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 17:12:16.733752012 CEST	1.1.1.1	192.168.2.4	0x6c62	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:12:16.733752012 CEST	1.1.1.1	192.168.2.4	0x6c62	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.37	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:16.733752012 CEST	1.1.1.1	192.168.2.4	0x6c62	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.20	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:16.733752012 CEST	1.1.1.1	192.168.2.4	0x6c62	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.23	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:16.733752012 CEST	1.1.1.1	192.168.2.4	0x6c62	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.35	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:16.733752012 CEST	1.1.1.1	192.168.2.4	0x6c62	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.34	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:16.733752012 CEST	1.1.1.1	192.168.2.4	0x6c62	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.27	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:16.733752012 CEST	1.1.1.1	192.168.2.4	0x6c62	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.19	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:16.733752012 CEST	1.1.1.1	192.168.2.4	0x6c62	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.20	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:19.223397017 CEST	1.1.1.1	192.168.2.4	0xb719	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:12:19.223397017 CEST	1.1.1.1	192.168.2.4	0xb719	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:36.372394085 CEST	1.1.1.1	192.168.2.4	0x89a7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:12:36.372394085 CEST	1.1.1.1	192.168.2.4	0x89a7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:55.355865955 CEST	1.1.1.1	192.168.2.4	0x3c18	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:12:55.355865955 CEST	1.1.1.1	192.168.2.4	0x3c18	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:12:57.905126095 CEST	1.1.1.1	192.168.2.4	0xe93b	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:12:57.905126095 CEST	1.1.1.1	192.168.2.4	0xe93b	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:12:57.905126095 CEST	1.1.1.1	192.168.2.4	0xe93b	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:13:16.384599924 CEST	1.1.1.1	192.168.2.4	0x94b2	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:13:16.384599924 CEST	1.1.1.1	192.168.2.4	0x94b2	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:13:16.384599924 CEST	1.1.1.1	192.168.2.4	0x94b2	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

bclimports.com

https:

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	195.250.27.36	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:12:06 UTC	700	OUT	GET /tracking/?_kx=KfuoVOAgm9pxkkrjoMM_rQ.RTApus HTTP/1.1 Host: bclimports.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 15:12:06 UTC	406	IN	HTTP/1.1 200 OK Connection: close content-type: text/html last-modified: Fri, 25 Oct 2024 12:00:40 GMT accept-ranges: bytes content-length: 30851 date: Fri, 25 Oct 2024 15:12:06 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-25 15:12:06 UTC	962	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 6c 65 74 20 72 37 35 76 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta http-equiv="Cache-Control" content="no-cache"><meta http-equiv="Pragma" content="no-cache"><script language="javascript">let r75v;!function(){const
2024-10-25 15:12:06 UTC	14994	IN	Data Raw: 72 43 6f 64 65 41 74 28 58 51 75 7a 3e 3e 3e 28 30 78 34 41 35 44 30 43 45 26 30 4f 33 32 30 34 32 33 34 32 34 29 29 29 5e 31 39 31 31 34 37 38 33 38 30 3b 7d 62 72 65 61 6b 3b 63 61 73 65 20 28 30 6f 32 30 37 30 32 30 2d 36 39 31 30 30 29 3a 44 74 43 7a 3d 28 31 33 31 30 39 39 25 30 6f 32 30 30 30 31 30 29 3b 58 51 75 7a 2b 2b 3b 62 72 65 61 6b 3b 63 61 73 65 20 28 32 36 32 32 31 35 25 30 6f 32 30 30 30 31 37 29 3a 44 74 43 7a 3d 58 51 75 7a 3c 48 79 48 7a 2e 6c 65 6e 67 74 68 3f 28 30 6f 34 30 30 31 34 34 25 30 78 31 30 30 32 31 29 3a 28 36 38 31 32 36 2d 30 6f 32 30 34 37 37 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 28 30 6f 31 30 30 30 30 37 31 25 30 78 31 30 30 30 43 29 3a 44 74 43 7a 3d 28 30 6f 32 30 31 34 30 32 2d 30 78 31 30 32 46 37 29 3b 58 51 Data Ascii: rCodeAt(XQuz>>>(0x4A5D0CE&0O320423424)))^1911478380;}break;case (0o207020-69100):DtCz=(131099%0o200010);XQuz++;break;case (262215%0o200017):DtCz=XQuz<HyHz.length?(0o400144%0x10021):(68126-0o204771);break;case (0o1000071%0x1000C):DtCz=(0o201402-0x102F7);XQ
2024-10-25 15:12:06 UTC	14895	IN	Data Raw: 49 49 6f 51 2b 25 35 42 25 31 46 25 31 45 40 4a 25 31 46 24 25 35 42 51 6f 25 31 45 25 33 43 25 33 43 6f 25 32 32 25 35 42 2b 25 31 39 25 31 38 25 33 43 25 33 43 6f 25 32 32 2d 59 25 31 46 6e 3a 3a 6f 25 32 32 2b 25 35 42 25 31 46 25 31 38 25 33 43 4a 25 31 46 52 2b 2d 25 31 39 25 31 38 4a 3a 25 31 39 24 2b 25 35 42 25 31 46 25 31 38 25 33 43 3a 6f 58 25 35 42 2b 25 31 39 25 31 38 25 33 43 25 33 43 6d 53 58 25 31 42 37 26 31 49 6d 50 59 25 30 44 25 32 32 30 25 30 46 25 30 32 30 25 31 30 25 31 46 25 31 45 64 26 26 25 32 35 25 31 34 51 59 25 30 42 36 25 32 30 25 31 35 25 31 34 36 25 31 37 50 58 6c 25 31 30 29 5c 27 25 31 36 51 59 59 6e 6d 34 25 32 35 25 30 37 35 58 59 6d 6c 4a 49 6f 51 2b 25 35 42 25 31 46 25 31 45 40 4a 25 31 46 24 25 35 42 51 6f 25 31 45 Data Ascii: IIoQ+%5B%1F%1E@J%1F$%5BQo%1E%3C%3Co%22%5B+%19%18%3C%3Co%22-Y%1Fn::o%22+%5B%1F%18%3CJ%1FR+-%19%18J:%19$+%5B%1F%18%3C:oX%5B+%19%18%3C%3CmSX%1B7&1ImPY%0D%220%0F%020%10%1F%1Ed&&%25%14QY%0B6%20%15%146%17PXl%10)\'%16QYYnm4%25%075XYmlJIoQ+%5B%1F%1E@J%1F$%5BQo%1E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	195.250.27.36	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:12:08 UTC	627	OUT	GET /favicon.ico HTTP/1.1 Host: bclimports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bclimports.com/tracking/?_kx=KfuoVOAgm9pxkkrjoMM_rQ.RTApus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 15:12:08 UTC	434	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1251 date: Fri, 25 Oct 2024 15:12:08 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-25 15:12:08 UTC	934	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</sty
2024-10-25 15:12:08 UTC	317	IN	Data Raw: 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 33 29 20 69 6e 73 65 74 3b 22 3e 0a 3c 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 65 72 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 74 20 4c 69 74 65 53 70 65 65 64 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 49 6e 63 2e 20 69 73 20 6e 6f 74 20 61 20 77 65 62 20 68 6f 73 74 69 6e 67 20 63 6f 6d 70 61 6e 79 20 61 6e 64 2c 20 61 73 20 73 75 63 68 2c 20 68 61 73 20 6e 6f 20 63 6f 6e Data Ascii: lor:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset;"><br>Proudly powered by LiteSpeed Web Server<p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:12:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 15:12:10 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=178372 Date: Fri, 25 Oct 2024 15:12:10 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:12:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 15:12:11 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=178371 Date: Fri, 25 Oct 2024 15:12:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 15:12:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49755	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:12:58 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:12:58 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:12:58 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 25 Oct 2024 11:03:28 GMT ETag: "0x8DCF4E4A7F3A397" x-ms-request-id: 52d5a461-501e-00a0-17e5-269d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151258Z-r1755647c66hbclz9tgqkaxg2w00000002bg000000000x68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:12:58 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 15:12:58 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-25 15:12:59 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-25 15:12:59 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-25 15:12:59 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-25 15:12:59 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-25 15:12:59 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-25 15:12:59 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-25 15:12:59 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-25 15:12:59 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49760	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:00 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:00 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151300Z-17fbfdc98bb8xnvm6t4x6ec5m400000008s0000000005ban x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:00 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49756	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:00 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:00 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151300Z-r1755647c66hbclz9tgqkaxg2w000000025g0000000077kc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:00 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49758	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:00 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:00 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151300Z-17fbfdc98bbb4cwtntwx06q14n000000013g000000007dtp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:00 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49759	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:00 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:00 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 63125a57-c01e-0046-4226-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151300Z-r1755647c66qg7mpa8m0fzcvy000000001z0000000000xum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:00 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49757	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:00 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:00 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151300Z-17fbfdc98bbwj6cp6df5812g4s000000026g0000000055hy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:00 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49762	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:01 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151301Z-r1755647c66dj7986akr8tvaw40000000an0000000004yyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49761	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:01 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:01 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151301Z-17fbfdc98bb7qlzm4x52d2225c00000008vg000000005zw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49764	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:01 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:01 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6d910339-b01e-0021-6856-23cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151301Z-17fbfdc98bbq2x5bzrteug30v800000008w0000000006bef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:01 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49765	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:01 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:01 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ad393351-301e-0099-6d59-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151301Z-17fbfdc98bblvnlh5w88rcarag000000093g000000002u2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:01 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49763	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:01 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 08684d9a-201e-0033-16a4-26b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151301Z-r1755647c66pzcrw3ktqe96x2s00000002000000000032s6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49769	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:02 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: ff4e5e63-c01e-0034-51dc-252af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151302Z-17fbfdc98bblfj7gw4f18guu28000000024g0000000045g3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49766	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:02 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 20eafa8b-401e-0067-4901-2009c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151302Z-r1755647c66h2wzt2z0cr0zc7400000005m0000000002ky6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49768	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:02 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: b526e42e-401e-005b-10a3-269c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151302Z-r1755647c66k9st9tvd58z9dg80000000bfg0000000021tf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49767	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:02 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 2026a68f-a01e-0002-5ea6-265074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151302Z-r1755647c66xdwzbrg67s9avs4000000011g000000007b71 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49770	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:02 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151302Z-r1755647c66tmf6g4720xfpwpn0000000c80000000002224 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49772	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:03 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 5e1d4904-301e-0020-1550-236299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151303Z-17fbfdc98bbvvplhck7mbap4bw00000002b0000000004fnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49773	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:03 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c39ac956-e01e-001f-465d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151303Z-17fbfdc98bbgqz661ufkm7k13c00000008wg0000000041n1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49774	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:03 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:03 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151303Z-r1755647c66cdf7jx43n17haqc0000000c2g000000006u6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:03 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49771	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:03 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:03 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bb9292ef-d01e-00ad-5d35-21e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151303Z-r1755647c668pfkhys7b5xnv2n00000001900000000034g9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:03 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49775	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:03 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151303Z-r1755647c668pfkhys7b5xnv2n00000001bg000000000p94 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:03 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49781	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:04 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:04 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6042bd80-301e-0033-4870-20fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151304Z-r1755647c66n5bjpba5s4mu9d00000000bb0000000006yd4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:04 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49777	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:04 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 92e07c79-601e-0001-41ae-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151304Z-r1755647c668mbb8rg8s8fbge400000008b0000000001zf4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49778	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:04 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151304Z-17fbfdc98bbx648l6xmxqcmf2000000008yg000000003dh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49780	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:04 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6949b098-b01e-0084-1a35-21d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151304Z-r1755647c668mbb8rg8s8fbge400000008ag000000002dp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49779	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:04 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:04 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151304Z-r1755647c66n5bjpba5s4mu9d00000000bb0000000006yd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:04 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49784	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:05 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 84bc9d3e-101e-007a-0792-1f047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151305Z-r1755647c66k9st9tvd58z9dg80000000bf0000000002r24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49782	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:05 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:05 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151305Z-17fbfdc98bbx648l6xmxqcmf20000000090g000000001r4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:05 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49783	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:05 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 95bcea4e-b01e-0070-78a3-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151305Z-17fbfdc98bbvvplhck7mbap4bw0000000280000000006zns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49786	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:05 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:05 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: c04d3aa5-c01e-002b-4b56-236e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151305Z-17fbfdc98bbg2mc9qrpn009kgs00000009400000000020kr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:05 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49785	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:05 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 346ac1b5-f01e-003f-6ed5-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151305Z-r1755647c668mbb8rg8s8fbge400000008cg000000000f2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49788	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:06 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151306Z-r1755647c66nfj7t97c2qyh6zg0000000870000000005qbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49787	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:06 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:06 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151306Z-17fbfdc98bbgqz661ufkm7k13c00000008vg000000004shn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:06 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49790	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:06 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 5cd52618-301e-0033-5865-23fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151306Z-17fbfdc98bbwj6cp6df5812g4s000000024g000000006s4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49789	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:06 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:06 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151306Z-r1755647c66lljn2k9s29ch9ts0000000bfg0000000027xe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 15:13:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49791	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:06 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:06 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 073a1825-701e-000d-74ae-266de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151306Z-r1755647c66hbclz9tgqkaxg2w00000002bg000000000x9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:06 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49792	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:07 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:07 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151307Z-r1755647c665dwkwce4e7gadz000000001gg0000000058w6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:07 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49795	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:07 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:07 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151307Z-r1755647c66d87vp2n0g7qt8bn0000000ar00000000027ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:07 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49793	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:07 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 2a077843-d01e-0049-74a3-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151307Z-17fbfdc98bbzw42qestznwt9ss000000011g00000000724q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49794	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:07 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:07 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2ee95feb-501e-0029-5d17-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151307Z-17fbfdc98bb8lw78ye6qppf97g000000013g000000006kem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:07 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49796	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:07 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:07 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151307Z-17fbfdc98bbb4cwtntwx06q14n000000013g000000007dyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:07 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49797	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:08 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:08 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151308Z-17fbfdc98bb6vp4m3kc0kte9cs00000001d0000000006an7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:08 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49798	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:08 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:08 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151308Z-r1755647c66zmxdx44917xaafw000000016g000000004mmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:08 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49799	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:08 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:08 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2125f972-501e-0035-10a3-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151308Z-r1755647c66zmxdx44917xaafw00000001b0000000000vu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:08 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49800	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:08 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:08 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b6b4fe6b-401e-008c-805d-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151308Z-17fbfdc98bb94gkbvedtsa5ef4000000093g000000000qv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:08 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49801	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:08 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:08 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151308Z-17fbfdc98bblfj7gw4f18guu280000000280000000000yag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:08 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49803	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:08 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:08 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151308Z-r1755647c66nxct5p0gnwngmx00000000asg000000000rsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:09 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49807	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:08 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 39bce04a-301e-0051-2eae-2638bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151309Z-r1755647c666s72wx0z5rz6s6000000001w000000000004y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:09 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49805	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:08 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 629c9caa-001e-0079-2150-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151309Z-17fbfdc98bb96dqv0e332dtg6000000008z000000000199b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49804	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:09 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0688ef78-901e-0029-5550-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151309Z-17fbfdc98bb94gkbvedtsa5ef4000000090g0000000041kc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49806	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:09 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: ba54a096-301e-0020-3719-266299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151309Z-17fbfdc98bbnsg5pw6rasm3q8s0000000150000000002fsc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49808	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:09 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: a8de1b79-001e-0017-5ba3-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151309Z-17fbfdc98bbvvplhck7mbap4bw000000029g000000005k1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49810	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:09 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151309Z-r1755647c669hnl7dkxy835cqc000000097000000000353w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49809	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:09 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151309Z-17fbfdc98bb7qlzm4x52d2225c000000091000000000124b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49811	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:09 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151310Z-17fbfdc98bb6vp4m3kc0kte9cs00000001kg000000001na7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:10 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49812	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:09 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151309Z-r1755647c66x2fg5vpbex0bd8400000002500000000044bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49813	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:10 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:10 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cc65e471-501e-008c-15b8-20cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151310Z-r1755647c66x7vzx9armv8e3cw00000002c0000000003v9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:10 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49814	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:10 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:10 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 750d06c7-901e-0083-2d5b-20bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151310Z-r1755647c668mbb8rg8s8fbge4000000085g000000007ht3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:10 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49815	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:10 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:10 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 97d7c53d-b01e-001e-2be3-200214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151310Z-r1755647c66cdf7jx43n17haqc0000000c2g000000006udh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:10 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49817	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:10 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151310Z-17fbfdc98bb96dqv0e332dtg6000000008vg000000004c9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49816	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:10 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:10 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6acd84c4-d01e-0066-15aa-20ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151310Z-r1755647c668mbb8rg8s8fbge4000000086g000000007ank x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:11 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49818	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:11 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:11 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1c36e671-f01e-0096-085a-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151311Z-17fbfdc98bbwfg2nvhsr4h37pn000000091g000000002acx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:11 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49819	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:11 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151311Z-r1755647c66nxct5p0gnwngmx00000000ahg000000007umm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:11 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49820	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:11 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:11 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2157dfbc-901e-0048-585d-23b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151311Z-17fbfdc98bbn5xh71qanksxprn0000000910000000005b3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:11 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49821	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:11 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:11 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e1e6f089-901e-005b-1e15-262005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151311Z-r1755647c66xdwzbrg67s9avs4000000018g000000000nyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:11 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49822	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:11 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:11 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 321a447c-801e-002a-4da3-2631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151311Z-17fbfdc98bbtf4jxpev5grnmyw00000000xg0000000029dw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:12 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49823	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:12 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 2067cf5d-601e-0001-3659-23faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151312Z-17fbfdc98bb7qlzm4x52d2225c00000008y00000000044e7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49826	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:12 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:12 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 310b9d61-301e-0051-4f21-2138bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151312Z-r1755647c66bdj57qqnd8h5hp80000000180000000007a8q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:12 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49824	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:12 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:12 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151312Z-17fbfdc98bbnhb2b0umpa641c800000008t0000000006hrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:12 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49825	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:12 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151312Z-17fbfdc98bbp4fvlbnh222662800000001xg0000000054as x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49827	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:12 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151312Z-17fbfdc98bb96dqv0e332dtg6000000008ug000000005rbk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49831	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:13 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151313Z-17fbfdc98bbfmg5wrf1ctcuuun000000013g000000003r5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49829	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:13 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 610ea227-401e-00ac-206b-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151313Z-17fbfdc98bbx648l6xmxqcmf2000000009200000000009hg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49828	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:13 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9728de04-701e-0097-2579-23b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151313Z-17fbfdc98bb96dqv0e332dtg6000000008x0000000003cbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49830	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:13 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:13 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151313Z-r1755647c66vpf8fnbgmzm21hs00000001s0000000000gus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:13 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49832	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:13 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:13 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: d90f75f3-d01e-0066-095d-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151313Z-17fbfdc98bbwj6cp6df5812g4s00000002b0000000000mfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:13 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49833	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:14 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:14 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151314Z-17fbfdc98bbg2mc9qrpn009kgs000000091g000000004uww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:14 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49834	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:14 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:14 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151314Z-17fbfdc98bb75b2fuh11781a0n00000008wg000000003mru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:14 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49836	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:14 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:14 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9cbc484f-801e-008f-0ca3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151314Z-17fbfdc98bbn5xh71qanksxprn00000008z0000000006uwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:14 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49835	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:14 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:14 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151314Z-r1755647c66tmf6g4720xfpwpn0000000c7g000000002fyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:14 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49837	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:14 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:14 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: baf401f8-c01e-00ad-1d9e-26a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151314Z-r1755647c66pzcrw3ktqe96x2s00000001w0000000006f7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:14 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49838	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:15 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:15 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151315Z-r1755647c666s72wx0z5rz6s6000000001tg000000002w16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:15 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49839	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:15 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:15 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151315Z-r1755647c66x2fg5vpbex0bd84000000020g000000007guh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:15 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49841	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:15 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:15 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 48cb41bd-401e-0064-5c64-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151315Z-17fbfdc98bblfj7gw4f18guu28000000026g000000002rad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:15 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49840	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:15 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:15 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151315Z-r1755647c66hlhp26bqv22ant400000000w0000000004hb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:15 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49842	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:15 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:15 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: c39a1591-e01e-001f-5e5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151315Z-17fbfdc98bb96dqv0e332dtg6000000008v00000000053a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:15 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49847	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:16 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:16 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 78a8beb2-e01e-0071-6ad7-2508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151316Z-17fbfdc98bblfj7gw4f18guu280000000240000000005tw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:16 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49845	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:16 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:16 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151316Z-17fbfdc98bb96dqv0e332dtg6000000008yg000000001s9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:16 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49846	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:16 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:16 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151316Z-17fbfdc98bb75b2fuh11781a0n00000008yg000000001pdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:16 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49844	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:16 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:16 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: c4fdf5e3-f01e-0003-490d-264453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151316Z-17fbfdc98bbgnnfwq36myy7z0g00000001bg000000002698 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:16 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49843	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:16 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:16 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 58106110-d01e-0014-27a3-26ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151316Z-r1755647c66vpf8fnbgmzm21hs00000001q00000000032u2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:16 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49849	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:17 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:17 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 9cbc9553-801e-008f-2aa3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151317Z-r1755647c66pzcrw3ktqe96x2s0000000210000000001hcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:17 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49850	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:17 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:17 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5ec9f71f-c01e-0082-7a31-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151317Z-r1755647c66qg7mpa8m0fzcvy000000001y0000000001uqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:17 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49848	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:17 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:17 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c39afafb-e01e-001f-695d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151317Z-17fbfdc98bb5d4fn785en176rg00000000pg000000005qk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:17 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49852	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:17 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:17 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 333fed2f-601e-003d-6b17-246f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151317Z-r1755647c66lljn2k9s29ch9ts0000000bfg00000000284x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:17 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49851	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:17 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:17 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151317Z-17fbfdc98bbb4cwtntwx06q14n0000000140000000007fmc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:17 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49853	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:18 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: db2454a4-901e-008f-72b1-2067a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151318Z-r1755647c66sn7s9kfw6gzvyp00000000bd0000000004tfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49854	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:18 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:18 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: c4804143-f01e-0003-2fe0-254453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151318Z-r1755647c66ldhdjeavapf4fd000000000rg0000000054rq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:18 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49855	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:18 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:18 UTC	591	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 672cac94-f01e-00aa-27b2-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151318Z-r1755647c668pfkhys7b5xnv2n00000001900000000034up x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 15:13:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49856	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:18 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151318Z-r1755647c66x46wg1q56tyyk680000000aq0000000003fhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49857	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:18 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 6115116d-c01e-00a1-6ef4-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151318Z-r1755647c66bdj57qqnd8h5hp8000000018g000000007czx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49860	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:19 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:19 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cc75a80d-201e-0096-720b-22ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151319Z-r1755647c66k9st9tvd58z9dg80000000bfg00000000228x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:19 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49861	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:19 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:19 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151319Z-17fbfdc98bbn5xh71qanksxprn0000000940000000002b9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:19 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49859	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:19 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:19 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0efe6ec1-b01e-0053-7d56-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151319Z-17fbfdc98bblvnlh5w88rcarag00000009100000000056fc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:19 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49858	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:19 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:19 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151319Z-r1755647c66x46wg1q56tyyk680000000aqg00000000365n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:19 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49862	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:19 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:19 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 3ed3a1a2-201e-0085-145a-2334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151319Z-17fbfdc98bbp4fvlbnh222662800000001yg0000000042bx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:19 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49863	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:20 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:20 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151320Z-r1755647c66nfj7t97c2qyh6zg000000085g000000007ga2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:20 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49864	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:20 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:20 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151320Z-17fbfdc98bbg2mc9qrpn009kgs0000000910000000005efh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:20 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49865	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:20 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:20 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a4c96680-901e-008f-156c-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151320Z-17fbfdc98bbn5xh71qanksxprn0000000940000000002ba2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:20 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49867	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:20 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: ba25bf78-401e-0015-2450-230e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151320Z-r1755647c66fnxpdavnqahfp1w00000009n00000000049cz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49866	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:20 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:20 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: a6d15796-a01e-00ab-7f80-269106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151320Z-r1755647c66pzcrw3ktqe96x2s0000000220000000000t3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:20 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49868	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:21 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:21 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f459058d-801e-0015-12e0-25f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151321Z-r1755647c66xdwzbrg67s9avs4000000015g000000003qh3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49869	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:21 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: a92bfc29-d01e-002b-34a3-2625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151321Z-17fbfdc98bbt5dtr27n1qp1eqc00000000wg000000005030 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49871	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:21 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: fc8879c6-e01e-003c-6a59-23c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151321Z-17fbfdc98bbtwz55a8v24wfkdw00000001yg000000000upz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49872	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:21 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151321Z-r1755647c66vpf8fnbgmzm21hs00000001pg000000003gda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49870	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:21 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b71c6767-a01e-0021-3a5a-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151321Z-17fbfdc98bb7qlzm4x52d2225c00000009100000000012c8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:21 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49873	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:21 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:22 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151322Z-r1755647c66x7vzx9armv8e3cw00000002cg0000000038dk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:22 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49874	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:22 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 55805c6b-301e-0052-57c0-2065d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151322Z-r1755647c66lljn2k9s29ch9ts0000000bc0000000005xnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49875	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:22 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:22 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b72677c2-a01e-0021-325d-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151322Z-17fbfdc98bb8xnvm6t4x6ec5m400000008s0000000005byr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:22 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49877	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:22 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:22 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 23449c74-401e-0083-0a50-23075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151322Z-17fbfdc98bbh7l5skzh3rekksc000000024g000000002k08 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:22 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49876	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:22 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:22 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 35d0191b-501e-0047-5a17-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151322Z-17fbfdc98bbdrxl6uxtpk5xvpw00000001ng00000000660k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49878	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:22 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:23 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:22 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 78a5f633-501e-005b-51a6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151322Z-r1755647c668pfkhys7b5xnv2n00000001bg000000000pvu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:23 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49879	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:22 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:23 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:22 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151322Z-r1755647c66hlhp26bqv22ant400000000y0000000001k97 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:23 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49881	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:22 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:22 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151322Z-17fbfdc98bbt5dtr27n1qp1eqc00000000y00000000035kg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:23 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49882	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:22 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:23 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:22 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 28aaec9d-301e-0033-281d-26fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151322Z-r1755647c66qg7mpa8m0fzcvy000000001z0000000000y5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:23 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49880	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:22 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:22 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0b335c04-001e-0049-76aa-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151322Z-r1755647c66h2wzt2z0cr0zc7400000005e0000000007v6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:23 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49886	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:24 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:24 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4a3ae400-b01e-0001-38e4-2546e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151324Z-17fbfdc98bbp4fvlbnh222662800000001wg000000005yrk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:24 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49884	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:24 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:24 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 26312148-601e-003e-327a-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151324Z-17fbfdc98bb5d4fn785en176rg00000000sg000000002ww1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:24 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49883	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:24 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:24 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 751f810a-001e-0079-6480-2612e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151324Z-17fbfdc98bbtwz55a8v24wfkdw00000001sg000000006n7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:24 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49885	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:24 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:24 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 80b3223a-a01e-0002-4456-235074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151324Z-17fbfdc98bbwfg2nvhsr4h37pn000000092000000000261x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:24 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49887	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:24 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151324Z-17fbfdc98bb7qlzm4x52d2225c00000008wg000000005h6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49890	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:25 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:25 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:25 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: bb02c222-c01e-00ad-7da4-26a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151325Z-r1755647c66zmxdx44917xaafw000000017g0000000047a0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:25 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49889	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:25 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:25 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 563c5de3-c01e-0034-155d-232af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151325Z-17fbfdc98bbgqz661ufkm7k13c00000008z00000000010e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:25 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49888	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:25 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:25 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151325Z-r1755647c66pzcrw3ktqe96x2s00000001vg000000007f6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:25 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49892	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:25 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:25 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: aba5bc6a-e01e-0003-59e5-210fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151325Z-r1755647c66nxct5p0gnwngmx00000000ar0000000001yrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:25 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49891	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:25 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:25 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:25 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: c79115df-401e-008c-03b0-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151325Z-17fbfdc98bbtwz55a8v24wfkdw00000001tg000000005sm6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:25 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49896	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:25 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:26 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:25 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151325Z-r1755647c668pfkhys7b5xnv2n0000000180000000004g2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:26 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49894	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:25 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151325Z-17fbfdc98bbtf4jxpev5grnmyw00000000w0000000003hx4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49895	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:25 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:25 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: ae8fe88e-901e-005b-2456-232005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151325Z-17fbfdc98bbvvplhck7mbap4bw00000002eg000000000pvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:26 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49893	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:25 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:26 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 4cfd72a3-b01e-003d-15ae-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151325Z-17fbfdc98bb5d4fn785en176rg00000000pg000000005qta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:26 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49897	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:25 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:26 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 77170aa2-001e-0049-0450-235bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151326Z-17fbfdc98bbwj6cp6df5812g4s000000025g000000005qy0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:26 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49898	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:26 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:26 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 914440ca-f01e-005d-6f5a-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151326Z-17fbfdc98bblvnlh5w88rcarag00000008z0000000006txb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:26 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49899	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:26 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:26 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bb32e714-c01e-008d-58b0-262eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151326Z-r1755647c66hbclz9tgqkaxg2w000000025g0000000078gy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:26 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49901	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:26 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:26 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 5949faeb-401e-0048-7bdb-200409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151326Z-r1755647c66qg7mpa8m0fzcvy000000001z0000000000y7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:26 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49900	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:26 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:26 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:26 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 51b44b3a-601e-0097-5627-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151326Z-r1755647c66n5bjpba5s4mu9d00000000bhg0000000002fd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:13:26 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49902	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:13:27 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:13:27 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:13:27 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 9109e3be-201e-0096-1336-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T151327Z-17fbfdc98bbt5dtr27n1qp1eqc00000000x000000000459y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:13:27 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5064, Parent PID: 3568

General

Target ID:	0
Start time:	11:11:57
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4908, Parent PID: 5064

General

Target ID:	2
Start time:	11:12:01
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2024,i,8536344897713664237,6416954509393950928,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6356, Parent PID: 3568

General

Target ID:	3
Start time:	11:12:03
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ctrk.klclick.com/l/01JB1J4FG94T2EZCRTXYQ7FS32_0"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /tracking/?_kx=KfuoVOAgm9pxkkrjoMM_rQ.RTApus HTTP/1.1Host: bclimports.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: bclimports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bclimports.com/tracking/?_kx=KfuoVOAgm9pxkkrjoMM_rQ.RTApusAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: ctrk.klclick.com
Source: global traffic	DNS traffic detected: DNS query: bclimports.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ctrk.klclick.com/l/01JB1J4FG94T2EZCRTXYQ7FS32_0

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 42

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5064, Parent PID: 3568

General

Chronological Activities

Analysis Process: chrome.exePID: 4908, Parent PID: 5064

General

Chronological Activities

Analysis Process: chrome.exePID: 6356, Parent PID: 3568

General

Chronological Activities

Disassembly

Windows Analysis Report
https://ctrk.klclick.com/l/01JB1J4FG94T2EZCRTXYQ7FS32_0